Rocket Surgeon

  • 0 Posts
  • 103 Comments
Joined 9 months ago
cake
Cake day: March 10th, 2025

help-circle





  • Ok, I quibble with much of what you just wrote, but your first line contained a lucid point.

    In essence, you propose that a federated monetization scheme would direct the bulk of the pie to the participants and not to the big corporate interests.

    Now that’s a damned interesting thing to consider.
    I think its obvious that it would/will go awry. Any time you get non-profits screwing around with money, somebody figures out how to steal it.
    But if even a bit more went to the participants and paid for infrastructure, that would be a positive thing.

    But again … non-profits and coops never handle money correctly. Watch this get all the way to the goalpost and then swoop, it all gets handled with GooglePay. Its doomed. DOOM.





  • Hey, um … I read your article. Or I tried to.
    It lost me at the point where I need to give money to somebody else. So, basically right at the start.

    To be more specific, your article starts of lamenting that its not convenient enough for me to give money to someone (“content creators”, a bullshit term if I’ve ever heard one) on these federated platforms. “this is a bit of a problem” There’s no examination of whether we should be doing this. Its taken as a given that monetization is a positive goal.

    So … I really tried to get there and understand your point, but there’s this vast gulf between us.
    Why would it be bad if nobody makes any money off the fediverse?
    That sounds good to me.


  • Netbox is a hell of a package, of which I’ve essentially only touched the IPAM, and I don’t even use it programmatically. I just use the web console to keep track of 4 subnets and about 50 IPs.

    It’s got a whole virtualization section that I haven’t touched, although that would make my device mapping more sensible. I just treat em like they are all real, and only map the physical nics on the hypervisor hosts.

    I do keep text notes in Netbox entries, but that’s sort of a backup. If its something I’m likely to need to know, I’ll have a note in Proxmox. Usually login links for apps hosted there and the like. And of course I’ve got a folder full of text files with all my deepest secrets.




  • SSH key management in PVE is handled in a set of secondary files, while the original debian files are replaced with symlinks. Well, that’s still debian. And in some circumstances the symlinks get b0rked or replaced with the original SSH files, the keys get out of sync, and one machine in the cluster can’t talk to another. The really irritating thing about this is that the tools meant to fix it (pvecm updatecerts) don’t work. I’ve got an elaborate set of procedures to gather the certs from the hosts and fix the files when it breaks, but it sux bad enough that I’ve got two clusters I’m putting off fixing.

    Corosync is the cluster. It’s a shared file system that immediately replicates any changes to all members. That’s essentially anything under /etc/pve/. Corosync is very sensitive. I believe they ask for 10ms lag or less between hosts, so it can’t work over a WAN connection. Shit like VM restores or vmotion between hosts can flood it out. Looks fukin awful when it goes down. Your whole cluster goes kaput.

    All corosync does is push around this set of config files, so a dedicated NIC is overkill, but in busy environments, you might wind up resorting to that. You can put cororsync on its own network, but you obviously need a network for that. And you can establish throttles on various types of host file transfer activities, but that’s a balancing act that I’ve only gotten right in our colos where we only have 1gb networks. I have my systems provisioned on a dedicated corosync vlan and also use a secondary IP on a different physical interface, but corosync is too dumb to fall back to the secondary if the primary is still “up”, regardless of whether its actually communicating, so I get calls on my day off about “the cluster is down!!!1” when people restore backups.


  • I use PVE professionally. I could spent some time bitching about how it handles ssh keys and the fragile corosync cluster management. I could complain about the sloppy release cycle and the way they move fast and break shit. Or all the janky shit they’ve slapped together in PBS. I could go on.

    But I actually pay for a license for my homelab. And ya, it is THE thing at work now.

    I’ve often heard it said that Proxmox isn’t a great option. But its the best one.
    If you do try it, don’t bother asking questions here.
    Go to the source. https://forum.proxmox.com/