PVE 1

IPv4: 37.59.46.214

IPv6: 2001:41D0:8:69d6::

Reverse: ns3000756.ip-37-59-46.eu

OS: Proxmox PVE 3.3 (Debian 7)

Manager: https://37.59.46.214:8006

Configuration

Disable entreprise support and upgrade

$ vi /etc/apt/sources.list.d/pve-enterprise.list

#deb https://enterprise.proxmox.com/debian wheezy pve-enterprise

$ aptitude update
$ aptitude upgrade

Reboot to load upgraded kernel

$ reboot

Enhance network configuration

$ vi /etc/host.conf

# The order option specifies the order in which the resolving services are tried.
order hosts,bind
# Machines with multiple IP addresses.
multi on
# Check for IP address spoofing.
nospoof on

Reduce FS write by disable access time stats

$ vi /etc/fstab

/dev/pve/data   /var/lib/vz     ext3    defaults,noatime,barrier=0      1       2

$ mount -o remount /var/lib/vz

Firewall

Managed via PVE interface:

• Global configuration:
• Input policy: Drop
• Output policy: Accept
• Proxmox server specific configuration
• Input Accept SSH macro
• Input Accept TCP destination port 8006 (PVE Interface)

Authentification

Install sudo

$ aptitude install sudo

Create users

$ adduser cyprien
$ adduser cyprien sudo
$ adduser damien
$ adduser damien sudo