• 2 Posts
  • 24 Comments
Joined 1 year ago
cake
Cake day: June 11th, 2025

help-circle

  • They have had their fair share of (sometimes easily avoidable) fuck-ups.

    Stuff like:

    • letting their websites SSL certificate expire (multiple times)
    • telling users to set the date in their OS back to when the cert was still valid as a workaround
    • accidentally DDoS’ing the AUR (I think multiple times too?)
    • IIRC also some internal struggle about how to use the money donated to them

    Especially the SSL cert hurts. They cannot auto-renew their websites SSL cert (and didn’t seem to learn from their first mistake) and they want to maintain a linux distro?







  • I did not run OPNSense, but I have a direct comparison for pfSense as VM on Proxmox VE vs pfSense on a ~400€ official pfSense physical appliance.

    I do not feel any internet-speed or LAN-speed differences in the 2 setups, I did not measure it though. The change VM -> physical appliance was not planned.

    Running a VM-firewall just got tiring fast, as I realized that Proxmox VE needs a lot more reboot-updates than pfsense does. And every time you reboot your pfSense-VM-Hypervisor, your internet’s gone for a short time. Yes, you’re not forced to reboot. I like to do it anyway, if it’s been advised by the people creating the software I use.

    Though I gotta say, the pfSense webinterface is actually really snappy and fast when running on an x86 VM. Now that I have a Netgate 2100 physical pfSense appliance, the webinterface takes a looooong time to respond in comparison.

    I guess the most important thing is to test it for yourself and to always keep an easy migration-path open, like exporting firewall-settings to a file so you can migrate easily, if the need arises.

    [EDIT] - Like others, I also would advice heavily against using the the same hypervisor for your firewall and other VMs. Bare-Metal is the most “uncomplicated” in terms of extra workload just to have your firewall up and running, but if you want to virtualize your firewall, put that VM on its own hypervisor.


  • Sadly, it seems I cannot replace the disks one-by-one. At least not if I don’t upgrade the SSD size to greater than 4TB at the same time.

    The consumer 4TB SSDs yield 3,64 TiB, whereas the datacenter 4TB SSDs seem to yield 3,49 TiB. As far as I know, one cannot replace a zfs raid z1 drive with a smaller one. I’ll have to watch the current consumer SSDs closely and be prepared for when I’ll have to switch them.

    I’m not all too sure about buying used IT / stuff in general from ebay, but I’ll have a look, thanks!





  • So I just looked it up: According to Proxmox VE “disks” interface, my SATA SSD drives have 1% wearout after ~1 month of low usage. That seems pretty horrible.

    I guess I’m going to wait until they die and buy enterprise SSDs as a replacement.

    I’m definitely not going to use HDDs, as the server is in my living room and I’m not going to tolerate constant HDD sounds.

    [EDIT] I don’t even have a cluster, it’s just a single Proxmox VE on a single server using ZFS and it’s still writing itself to death.

    [EDIT2] What do you think about Samsung OEM Datacenter SSD PM893 3,84 TB?

    Thanks for your input!




  • hamsda@feddit.orgtoSelfhosted@lemmy.world•Beyond Pi-Hole
    link
    fedilink
    English
    arrow-up
    5
    ·
    1 year ago

    I don’t know about tailscale, but it seems pihole has got you covered with local DNS, if you’re willing to set the local DNS records manually.

    I use pihole as selfhosted DNS server for all my servers and clients. I don’t have many local DNS records (only 2), so if you handle a great amount of ever-changing DNS records, this might not be for you.


  • To me it seems like:

    • you want to do a lot of stuff yourself on arch
    • but there’s quite some complicated stuff to learn and try

    I’d try Proxmox VE and, if you’re also searching for a Backup Server, Proxmox Backup Server.

    I recommend these because:

    • Proxmox VE is a Hypervisor, you can just spin up Arch Linux VMs for every task you need
    • Proxmox VE, as well as Proxmox BS are open source
    • you can buy a license for “stable updates” (you get the same updates, but delayed, to fix problems before they get to you)
    • includes snapshots, re-rolls, full-backups, a firewall (which you can turn on or off for every VM), …

    I personally run a Proxmox VE + Proxmox BS setup in 3 companies + my own homelab.

    It’s not magic, Proxmox VE is literally Debian 13 + qemu + kvm with a nice webui. So you know the tech is proven, it’s just now you also get an easy to use interface instead of virsh console commands or virt-manager.

    I personally like a stable infrastructure to test and run my important and experimental tuff upon. That’s why I’m going with this instead of managing even the hypervisor myself with Arch.