↓Skip to main content
IT Blog IT Blog
  1. All Posts/

proxmox_toolbox

Tools Shell

Proxmox Toolbox

Toolbox to setup Proxmox Virtual Environment and Backup Server

Tonton Jo

Join the community:


Support my work, give a thanks and help the youtube channel:



Informations:

This little tool aim to get smalls one-time configurations for Proxmox Virtual environement and backup server hosts in no time.
It automatically will find if the host is a pve or a pbs host and setup accordingly.

Demonstration:

You can watch a demonstration of the tool in this playlist

Prerequisits:

  • PVE or PBS server
  • Internet connexion

Features are:

  • Automatic PVE / PBS host detection
  • Hide enterprise repo and set no-subscription repository
  • Update host and create a new command “proxmox-update”
    • when no-enterprise source is set, disable no-subscription message
  • Install usefull dependencies: ifupdown2 – git – sudo – libsasl2-modules – snmp
  • Security settings:
    • Enable fail 2 ban with default configuration for sshd, proxmox virtual environement and backup server
      (credits to inettgmbh)
    • Create another debian user with sudo rights
    • Disable root ssh login
    • Create another Proxmox GUI administrator (login with Proxmox VE Realm)
    • Disabling root@pam user !!! root@pam is needed to update from GUI – update can still be done trough SSH if disabled !!!
  • Change or disable SWAP
  • Enable S.M.A.R.T self-tests on all supported drives
    • short: every sunday@22 – Long: every 1st of month @22
  • Enable SNMP V2 or v3 – you choose – with a default working configuration
  • Configure email service to send system and proxmox notifications (postfix)
  • Backup and restore Proxmox Virtual Environment and Backup Server configuration
    • Automatic remount of directories and zpools using previously existing configurations
    • Please find more informations below

USAGE

Get and execute: 

wget -qO proxmox_toolbox.sh https://raw.githubusercontent.com/Tontonjo/proxmox_toolbox/main/proxmox_toolbox.sh && bash proxmox_toolbox.sh

Updating host & remove subscription

The script will update your host and detect if the no-enterprise source is configured, if so, remove the subscription message.

  • If you still encounter it after, clear your broswer cache.
  • If you update your host directly within the system, the no subscribtion message may reappear when the file gets updated.
  • In order to nerver see this again, you have to update Proxmox with one of the following options:

To start an update only, without menu or prompt:

bash proxmox_toolbox.sh -u

Once the tool has been used to update host, you can execute this command to fully update your host – kind of an alias of bash proxmox_toolbox.sh -u

proxmox-update

Fail2ban:

If you enable fail2ban, i guess you know what you’re doing, if you dont: here’s some usefull informations and commands:

  • ban are for 1 hour
  • ssh and web interface logins are monitored

List of $jailname: 

fail2ban-client status

get status of a jails – display banned IP’s 

fail2ban-client status $jailname

Unband an IP: 

fail2ban-client set $jailname unbanip  $ipaddress

Backup and Restoration:

  • Be carefull as this was not extensively tested – especially not with cluster configurations
  • The following folders and configurations are backuped by default:
    /etc/ssh/sshd_config /root/.ssh/ /etc/fail2ban/ /etc/systemd/system/*.mount /etc/network/interfaces /etc/sysctl.conf /etc/resolv.conf /etc/hosts /etc/hostname /etc/cron* /etc/aliases /etc/snmp/ /etc/smartd.conf /usr/share/snmp/snmpd.conf /etc/postfix/ /etc/pve/ /etc/lvm/ /etc/modprobe.d/ /var/lib/pve-firewall/ /var/lib/pve-cluster/ /etc/vzdump.conf /etc/ksmtuned.conf /etc/proxmox-backup/

Backup

The script will put every folder listed in backup_content in a tar.gz archive.

  • You cand add /remove folder trough the edit of backup_content= line in the script
  • You can change the target folder to use for backup and restoration in the script env. variables at: backupdir=”/root/”

Once the backup is done, a tar.gz archive is located at backupdir=”/root/”.

Restauration:

The script looks for tar.gz files located in backupdir=”/root/” and will list all the available archives for you to choose one.
Warning: The restauration will overwrite any existing file with the one in archive
The restauration process will:

  • Reinstall missing dependencies for snmp and fail2ban if config were existing
  • Restore Proxmox configurations (proxmox configs, certificates, vm configs, storages configs, proxmox users)
  • Automatically remount the following storages: dir and zpools

Directory mountpoint and zpool

In case of need, here’s how you can manually mount storages:

Directory:

Mount configurations are located in /etc/systemd/system/*.mount

  • run the following commands with the values you just retreived 
mkdir -p "$where"
echo "$what $where $Type $Options 0 2" >> /etc/fstab  
mount -a
  • Control if the drives are now correctly mounted
  • Add a new Directory storage in pve/pbs using “where” as directory path

Zpool:

  • run 
zpool import
  • Take note of the “pool” name and run 
zpool import -f $poolname
  • Add a new ZFS storage in pve/pbs

SOURCES:

https://pve.proxmox.com/wiki/Fail2ban
https://github.com/inettgmbh/fail2ban-proxmox-backup-server
https://forum.proxmox.com/threads/how-do-i-set-the-mail-server-to-be-used-in-proxmox.23669/
https://linuxscriptshub.com/configure-smtp-with-gmail-using-postfix/
https://suoption_pickedpport.google.com/accounts/answer/6010255
https://www.howtoforge.com/community/threads/solved-problem-with-outgoing-mail-from-server.53920/
http://mhawthorne.net/posts/2011-postfix-configuring-gmail-as-relay/
https://docs.oracle.com/en/cloud/cloud-at-customer/occ-get-started/add-ssh-enabled-user.html
https://www.noobunbox.net/serveur/monitoring/configurer-snmp-v3-sous-debian
https://github.com/DeadlockState/Proxmox-prepare
https://blog.lbdg.me/proxmox-best-performance-disable-swappiness/
https://gist.github.com/mrpeardotnet/6bdc4b504f43ce57fa7eaee96d376edf
https://github.com/DerDanilo/proxmox-stuff/blob/master/prox_config_backup.sh
https://pve.proxmox.com/wiki/Upgrade_from_6.x_to_7.0
https://wiki.debian.org/SSDOptimization
https://www.linuxtricks.fr/wiki/proxmox-quelques-infos
https://bobcares.com/blog/fail2ban-unban-ip/

TODO:

settings for zram -> https://pve.proxmox.com/wiki/Zram
PBS: add support for user creation and backup / restoration
user creation fro PBS when available
make things stupid-proof (deny characters when numbers expected and so on)
Tonton Jo – 2022



↑