Proxmox SDR Installation
SDR
The scope7 Proxmox Appliance can be restored to its factory state using SDR (Secure Disaster Recovery). SDR consists of a USB flash drive supplied with the appliance and so-called AppliPacks, which contain the software to be installed.
AppliPacks can easily be replaced with newer versions of the supplied software or with other software installations provided by SECUDOS. To do this, download the new AppliPack from the website and save it to the USB drive as applipack.sdr.
To start SDR, boot the appliance from the SDR USB drive. The appliance will then be reinstalled automatically without any further user interaction.
All data stored on the appliance will be permanently lost during this process!
Booting from the SDR USB drive is usually performed automatically when the appliance starts. Some appliances require configuration through a boot menu to boot from the SDR USB drive. The boot menu is typically accessed by pressing F7.
The first startup of the appliance after installation takes longer than usual, and at least one additional reboot will occur.
Proxmox Preconfiguration
The SDR installation for Proxmox provides the option to store a configuration for the Proxmox system installation on the SDR USB drive. This allows the new installation to be performed using a customized configuration.
To do this, save a file named pxbootup.cfg to the SDR USB drive.
The file has the following structure:
#
# PXRECONF configuration file
#
# PROXMOX system configuration set on first boot
#
global:
hostname: pxx # Hostname without domain
domain: landitec.de # Domain of the system
email: pxx@landitec.de # Root EMail address
timezone: Europe/Berlin # timezone
#
# Network
#
network:
dns:
search domain: landitec.de # Search Domain
server1 : 192.168.3.1 # DNS server 1
server2 : 192.168.3.1 # DNS server 2
server3 : 192.168.3.1 # DNS server 3
hosts: # additional hosts entries
- address: 10.2.2.2 # IP address
hostname: my.test.tld # canonical hostname
alias: my # alias
device: # Devices
- name: enport2 # ethernet port name
autostart: true # (optional) autostart bridge (default: true)
comment: Device # (optional) comment (default: "")
address: 192.168.3.5/24 # (optional) IPv4/netmask
gateway: 192.168.3.1 # (optional) IPv4 gateway
address6: fd9e:21a7:a92c:2323::11/7 # (optional) IPv6/netmask
gateway6: fd9e:21a7:a92c:2323::1 # (optional) IPv6 gateway
mtu: 1500 # (optional) maximum transmission unit (default: 1500)
linux-bridge: # Linux bridges
- name: vmbr0 # name must be vmbrX starting by 0
autostart: true # (optional) autostart bridge (default: true)
comment: Bridge # (optional) comment (default: "")
address: 192.168.3.5/24 # (optional) IPv4/netmask
gateway: 192.168.3.1 # (optional) IPv4 gateway
address6: fd9e:21a7:a92c:2323::11/7 # (optional) IPv6/netmask
gateway6: fd9e:21a7:a92c:2323::1 # (optional) IPv6 gateway
ports: enport1 # (optional) ethernet ports seperated by spaces
fd: 0 # (optional) bridge forward delay (default: 0)
vlan-aware: false # (optional) vlan aware bridge (default: false)
vids: 2-4094 # (optional) bridge port vids (default: "")
mtu: 1500 # (optional) maximum transmission unit (default: 1500)
linux-bond: # Linux bonds
- name: bond0 # name must be bondX starting by 0
autostart: true # (optional) autostart bond (default: true)
comment: Bond # (optional) comment (default: "")
address: 192.168.3.5/24 # (optional) IPv4/netmask
gateway: 192.168.3.1 # (optional) IPv4 gateway
address6: fd9e:21a7:a92c:2323::11/7 # (optional) IPv6/netmask
gateway6: fd9e:21a7:a92c:2323::1 # (optional) IPv6 gateway
mtu: 1500 # (optional) maximum transmission unit (default: 1500)
slaves: enport2 enport3 # (optional) ethernet ports seperated by spaces
mode: 802.3ad # (optional) balance-rr, active-backup, balance-xor, broadcast, 802.3ad, balance-tlb, balance-alb
hashpolicy: layer2 # (optional) layer2, layer3+4, layer2+3 (for balance-xor, 802.3ad)
primary: enport2 # (optional) primary port (for: active-backup)
# Either add the VLAN number to an existing interface name, or choose your own name and set the
# VLAN raw device (for the latter ifupdown1 supports vlanXY naming only)
linux-vlan: # Linux VLANs
- name: vlan0 # name must be vlanX starting by 0 or existing interface
autostart: true # (optional) autostart VLAN (default: true)
comment: VLAN # (optional) comment (default: "")
address: 192.168.3.5/24 # (optional) IPv4/netmask
gateway: 192.168.3.1 # (optional) IPv4 gateway
address6: fd9e:21a7:a92c:2323::11/7 # (optional) IPv6/netmask
gateway6: fd9e:21a7:a92c:2323::1 # (optional) IPv6 gateway
mtu: 1500 # (optional) maximum transmission unit (default: 1500)
raw device: enport2 # (optional) ethernet port
tag: 3 # (optional) VLAN tag
storage:
- name: zvmpool # name of storage
type: zfs # storage type: zfs, (lvm)
disks: nvme0n1 # disk devices, separated by spaces
raid: raidz # ZFS Raid level: raid10, raidz, raid2
compression: true # ZFS compression
ashift: 12 # ZFS ashift (default: 12)
thin: true # Thin provision
gallery:
address: 192.168.3.6/24 # (optional) IPv4/netmask
gateway: 192.168.3.1 # (optional) IPv4 gateway
address6: fd9e:21a7:a92c:2323::11/7 # (optional) IPv6/netmask
gateway6: fd9e:21a7:a92c:2323::1 # (optional) IPv6 gateway
bridge: vmbr0 # (optional) Bridge to attache network (default: vmbr0)
# Local Variables:
# mode: yaml
# End: