Hey all, just hoping to get some advice on any software out there that can help me keep on top of all the VMs i'm running on my Proxmox instances, and potentially my other machines I have too.
I'm looking for a way to help me stay on top of updates and things like when the machine was last online, last rebooted etc etc. There are commercial products for such a thing, and I don't necessarily want to install any sort of Agent on each of the machines (if I can avoid it).
I looked at something like Homarr, but not sure if that's what i'm really after.
Very few things out there don't require an agent. TacticalRMM is a decent self-hosted device management platform, but I don't really trust them after some controversy with an embedded Monero miner in the agent (has since been removed, but come on).
MeshCentral is what TRMM uses for its remoting and its pretty robust, but doesn't do patch management on its own. If most of your infrastructure is Linux, you can easily handle it yourself though.
TBH, manual management would be the easiest if your infrastructure is small enough.
Ansible doesn't need an agent besides python and can take care of most kinds of updates. You have to run/schedule it regularly though. It's pretty good for updating multiple hosts at once (assuming they mostly have the same OSes).
For uptime, CPU etc you mostly need agents but Proxmox also shows some of these in the UI.
True, but I'm not sure I'd put up awx nowadays. At work we migrated from Tower/AWX to Ansible in Gitlab pipelines because of constant problems and I'm thinking about doing a similar thing in my Forgejo. I'm not much of a fan if running Ansible via CLI except for development purposes. Too much trouble with variables
They were talking about something similar on episode 38 of hybridcloudshow.com/ I think. I see that it is not out yet, I got it early because I pay for the subscription. When it comes out you could give it a listen
I didn't catch everything, but Ansible might be worth looking into
I've always felt like this is an area with a huge gap. I've got my own fragile, cobbled-together bullshit that works for me, but it's far from ideal or reliable if I'm being honest. I do love Ansible's general idea of relying on standard, always-ish available protocols like ssh as a universal connection method, and I think it could work well as the bulletproof lower layer when you want to use direct control over the CLI tools and configuration files, like what git provides for anything requiring version control, but ansible needs a slick management interface like github/forgejo provides on top of git, to fill in the higher level UI for when you need a wider scope to get an overview of what's going on or to make general configuration changes without needing to get your hands dirty. Ideally it would look a lot like Proxmox itself does, just, not specific to Proxmox. Like if I want to add my Steam Deck, and I've got ssh enabled on it and it's not asleep, it should be able to ansible its way in there somehow to at least get whatever basic details it can. Maybe that's only basic system information at first, but from there I could work on customizing it. That's what I would consider the ideal, for me at least.
Yea that was going to be my next step if I don't find anything that fits my needs, I'll make it - but this is a solved problem for sure. I just need the right thing that's close enough to what I'm looking for.
I run debian on everything, so I set up unattended-upgrades for security updates and basically forget about it. Docker updates are also automatic with Komodo, just make sure databases are pinned to a major version.
For monitoring my services I use Uptime Kuma, and get an alert if a service goes down so I can fix it.
Been pretty solid for years now. Things get rebooted every month or two when I do a Proxmox upgrade and reboot the host.
If you're running Proxmox already,, just spin up a VM for Podman/Docker and set up unattended-upgrades. Boom, done. You don't need a whole lot of CPU or RAM for that, either.
Yep, I do that on Debian hosts, EL (RHEL/Rocky/etc.) have a similar feature.
However, you need to keep an eye for updates that require a reboot. I use my own Nagios agent that (among other things) sends me warnings when hosts require a reboot (both apt/dnf make this easy to check).
I wouldn't care about last online/reboots; I just do some basic monitoring to get an alert if a host is down. Spontaneous reboots would be a sign of an underlying issue.
I use Ultimate Updater connected to gotify to tell me which machines have updates with a noti every day. I can then run update and it will take snapshots and upgrade everything when needed.
It really only does linux systems and wont do docker, but there's watchtower (the one that's still alive) to do that.
Had a look at that, sounds pretty cool. Curious to know why you linked to a fork that is out of date and not to the original at github.com/BassT23/Proxmox
p.s. As @Stefan_S_from_H has pointed out, different web browsers seem to render this button differently. When I checked on iPhone's web browser the button wasn't there at all π²
Could you let me know if this button looks different on your browser, or if the button is totally absent? It would be really useful info π
(n.b. This is just in the *web* version of Mastodon, not the apps.)
this is Firefox on an Android phone β it's rendered as a share button, and when I tap on it, it brings up a share dialogue. So I can copy the web address to the clipboard or send it to various apps.
@Stefan_S_from_H Safari on iOS: on portrait, no button, but on landscape, there is a share button and copy is available in the standard share menu (along with many other alternatives).
!OpenWrt - I am looking for anyone who is using OpenWrt with Orange or Jazztel Spain who might be able to help me figure out why after changing my router I can't get an Ipv6 allocated to my connection. #openwrt #Jazztel #orange #ipv6 #spain - I'd really appreciate any boosts to followers in spain who might be able to help - Its driving me nuts!
Estoy buscando por alguien que usa Openwrt con Jaztell o Orange EspaΓ±a que peude ayudarme porque despues del le cambio el router no le puede obtiner un numero IPv6. Estoy loco porque no pude entiender por que no se funciona. Me gustaria mucho si puede me recomiendes alguien con que hablar y hacer boosts para compatir con otra gente de espaΓ±a.
#BuenasNoches desde #Asturias TΓΊ, necesitas Y, yo te pregunto: lo que yo necesito. te envuelves en tus murallas como en una piel de armiΓ±o. Te rodeas de perfume de oriente como cualquier otro caudillo librador de batallas del alma de asaltador de castillos los de naipes del alma los de amores perdidos TΓΊ, necesitas ahora, te importa, luego, lo que yo necesito? Miquel NiΓ±o youtube.com/shorts/r7--KwkY3vIβ¦
Disfruta de los vΓdeos y la mΓΊsica que te gustan, sube material original y comparte el contenido con tus amigos, tu familia y el resto del mundo en YouTube.
After the suspension of the previous day, the fleet of 49 classic and vintage yachts was finally able to set sail on a short but intense course, starting and finishing in the natural harbor of the Menorcan capital.
β οΈ There is another "verification" scammer on the move, do not click on their link, it is a scam!
Genuine Mastodon servers never demand verification like this.
If you see a scam post like this, click β― on the scam post, then "Report", then report it and make sure you select the option to forward the report to the origin server.
yeh it's a great point! are there other dangers to consider? we're very open to tips on this π
we're discussing the need to approach this more holistically and translate also the docs which people would copy/pasta from.
we're working closely with people sharing sysadmin skills with others in spanish but that is not their first language. english is then a 3rd language. so not having sub-command translation is confusing the situation significantly...
i haven't seen a single CLI tool in my life that has translatable sub-commands/flags but i suspect that is just my bias and the the general concentration of software development in english speaking centers...
In Turkmenistan, one of the world's most isolated regimes, internet censorship evolved beyond surveillance & control. The people blocking access to the internet are secretly selling it back, at prices most Turkmens can't afford. This has implications far beyond 1 country: blog.torproject.org/Corruptionβ¦
AnIntenseMoist
in reply to Matty_r • • •Very few things out there don't require an agent. TacticalRMM is a decent self-hosted device management platform, but I don't really trust them after some controversy with an embedded Monero miner in the agent (has since been removed, but come on).
MeshCentral is what TRMM uses for its remoting and its pretty robust, but doesn't do patch management on its own. If most of your infrastructure is Linux, you can easily handle it yourself though.
TBH, manual management would be the easiest if your infrastructure is small enough.
like this
Cobrachicken and tfe like this.
tofu
in reply to Matty_r • • •Ansible doesn't need an agent besides python and can take care of most kinds of updates. You have to run/schedule it regularly though. It's pretty good for updating multiple hosts at once (assuming they mostly have the same OSes).
For uptime, CPU etc you mostly need agents but Proxmox also shows some of these in the UI.
like this
ryokimball, wildbus8979, Mellow, Gagootron, Possibly linux, raoul and vegetaaaaaaa like this.
ryokimball
in reply to tofu • • •AWX is basically Ansible as a service.
Wait. That sounds dumb. Hosted and centralized Ansible?
Idk. Brain not braining. Just saying, it's worth checking out.
tofu likes this.
tofu
in reply to ryokimball • • •Possibly linux
in reply to ryokimball • • •Matty_r
in reply to tofu • • •tofu likes this.
conrad82
in reply to Matty_r • • •They were talking about something similar on episode 38 of hybridcloudshow.com/ I think. I see that it is not out yet, I got it early because I pay for the subscription. When it comes out you could give it a listen
I didn't catch everything, but Ansible might be worth looking into
Hybrid Cloud Show
hybridcloudshow.comlike this
Matty_r, k_rol and Leax like this.
Matty_r
in reply to conrad82 • • •cecilkorik
in reply to Matty_r • • •like this
drhoopoe and Matty_r like this.
Matty_r
in reply to cecilkorik • • •MangoPenguin
in reply to Matty_r • • •I run debian on everything, so I set up
unattended-upgradesfor security updates and basically forget about it. Docker updates are also automatic with Komodo, just make sure databases are pinned to a major version.For monitoring my services I use Uptime Kuma, and get an alert if a service goes down so I can fix it.
Been pretty solid for years now. Things get rebooted every month or two when I do a Proxmox upgrade and reboot the host.
like this
SolidGrue and tofu like this.
jimmy90
in reply to Matty_r • • •Podman inside Nixos inside LXC inside Proxmox
Auto updates configurable everywhere
don't like this
minoche, Possibly linux and demonsword don't like this.
Lka1988
in reply to jimmy90 • • •y tho
If you're running Proxmox already,, just spin up a VM for Podman/Docker and set up
unattended-upgrades. Boom, done. You don't need a whole lot of CPU or RAM for that, either.TheUniverseandNetworks
in reply to Matty_r • • •As others have said, if your VMs are Linux, set up unattended_updates and forget about it.
If your VMs are windows, then Action1 is free up to 200 clients, it does need an agent installed, but that auto updates too.
like this
manmachine, koala and vegetaaaaaaa like this.
koala
in reply to TheUniverseandNetworks • • •Yep, I do that on Debian hosts, EL (RHEL/Rocky/etc.) have a similar feature.
However, you need to keep an eye for updates that require a reboot. I use my own Nagios agent that (among other things) sends me warnings when hosts require a reboot (both apt/dnf make this easy to check).
I wouldn't care about last online/reboots; I just do some basic monitoring to get an alert if a host is down. Spontaneous reboots would be a sign of an underlying issue.
OminousOrange
in reply to Matty_r • • •I use Ultimate Updater connected to gotify to tell me which machines have updates with a noti every day. I can then run
updateand it will take snapshots and upgrade everything when needed.It really only does linux systems and wont do docker, but there's watchtower (the one that's still alive) to do that.
GitHub - BassT23/Proxmox: Update your Proxmox VE
GitHubMatty_r likes this.
Matty_r
in reply to OminousOrange • • •GitHub - BassT23/Proxmox: Update your Proxmox VE
GitHubOminousOrange
in reply to Matty_r • • •Matty_r likes this.
Matty_r
in reply to OminousOrange • • •Possibly linux
in reply to Matty_r • • •