Skip to content

Latest commit

 

History

History
241 lines (186 loc) · 7.33 KB

proxmox-one-IP-kimsufi.md

File metadata and controls

241 lines (186 loc) · 7.33 KB
Raw

Make a ProxMox Node with NAT VM available outside the local network.

  • OS : DEBIAN 9
  • Host : Kimsufi

Basic fresh install Proxmox

First install your Proxmox OS, then :

  • "nano /etc/apt/sources.list.d/pve-enterprise.list"
  • coment the deb line #

nano /etc/apt/sources.list.d/pve-install-repo.list (OVH config file for DEB PVE No sub)

deb http://download.proxmox.com/debian stretch pvetest
deb http://download.proxmox.com/debian stretch pve-no-subscription

nano nano /etc/apt/sources.list (Config file for debian DEB based on OVH sources)

#
deb http://debian.mirrors.ovh.net/debian stretch main contrib non-free
deb-src http://debian.mirrors.ovh.net/debian stretch main contrib non-free

deb http://security.debian.org/debian-security stretch/updates main
deb-src http://security.debian.org/debian-security stretch/updates main

# stretch-updates, previously known as 'volatile'
deb http://debian.mirrors.ovh.net/debian stretch-updates main
deb-src http://debian.mirrors.ovh.net/debian stretch-updates main'
  • apt-get update && apt-get upgrade -y

Method for basic fresh install (Other hosts)

Software configurations

Add templates for LXC containers

  • pveam update
  • pveam available # List all the templates
  • pveam download local #$$$$$$Package$$$$$ #Add template
  • pveam remove local:vztmpl/#$$$$$Package$$$$$ #Remove template
  • pveam list local #List all saved templates

Container LXC creation

General
  • CT ID : number
  • HostName : reverse
  • Tick unprivileged
  • Password : root passwd
Modele
  • Storage : Local
  • Modele : choose OS
Disk root
  • Size : Number of GB
CPU
  • Core : nb vcore
Memory
  • Ram : nb gb
  • Swap : 256mo
Network
  • Name (i.e. eth0): eth0
  • MAC Adress:
  • Bridge: vmbr2
  • Tag VLAN:
  • Networking limit (MB/s):
  • Firewall :
  • IPv4:
  • IPv4/CIDR: 192.168.1.X/24
  • Gateway (IPv4): 192.168.1.254
  • IPv6:
  • IPv6/CIDR:
  • Gateway (IPv6):
DNS
  • Let empty

VM configurations

Unlock Root Login Debian 8/9

  • Visit console
  • Enter credentials
  • nano /etc/ssh/sshd_config
  • Change "PermitRootLogin" for yes
  • PermitRootLogin yes
  • Save and exit
  • systemctl restart ssh

SSH Port

In case of use of a different SSH port, you only need to uncomment the line Port and setup the number that you want. Default : 22

  • Port $$
  • Save and exit
  • systemctl restart ssh

Usefull tools

  • apt install htop fail2ban nload

Tips

ls /sys/class/net/ # Allow to know every single network interfaces available on the node.

CONFIG

nano /etc/network/interfaces

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

# for Routing
auto vmbr1
iface vmbr1 inet manual
        bridge_ports dummy0
        bridge_stp off
        bridge_fd 0

# vmbr0 : Bridging. Make sure to use only MAC adresses that were assigned to you. Public IP attribution.
auto vmbr0
iface vmbr0 inet static
        address xx.xx.xx.xx/24
        gateway xx.xx.xx.254
        bridge_ports eno1
        bridge_stp off
        bridge_fd 0

# vmbr2 : LAN. Allow to forward locally incoming and outgoing data transfers.
auto vmbr2
iface vmbr2 inet static
        address 192.168.1.254
        netmask 255.255.255.0
        broadcast 192.168.1.255
        bridge_ports LAN
        bridge_stp off
        bridge_fd 0
        post-up echo 1 > /proc/sys/net/ipv4/ip_forward
        post-up iptables -t nat -A POSTROUTING -s '192.168.1.0/24' -o vmbr0 -j MASQUERADE
        post-down iptables -t nat -D POSTROUTING -s '192.168.1.0/24' -o vmbr0 -j MASQUERADE

#VM NAT
post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport $$$$ -j DNAT --to 192.168.1.x:$$$$
post-down iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport $$$$ -j DNAT --to 192.168.1.x:$$$$
...
  • Reboot the node to apply

======

systemctl restart networking

systemctl status networking

systemctl restart systemd-networkd

https://wiki.archlinux.org/index.php/systemd-networkd

LINKS :

SOURCES :

A + : https://bash.cyberciti.biz/virtualization/shell-script-to-setup-an-lxd-linux-containers-vm-lab-for-testing-purpose/ Auto setup VM, IP attribution.

ONLINE :

"nano /etc/apt/sources.list.d/pve-install-repo.list"

deb http://download.proxmox.com/debian stretch pve-no-subscription

"nano /etc/apt/sources.list"

# deb http://mirrors.online.net/debian stretch main

deb http://mirrors.online.net/debian stretch main non-free contrib
deb-src http://mirrors.online.net/debian stretch main non-free contrib

deb http://security.debian.org/debian-security stretch/updates main contrib non-free
deb-src http://security.debian.org/debian-security stretch/updates main contrib non-free

dpkg-reconfigure tzdata

Change DNS

Search domain:	SRV
DNS server 1:	1.1.1.1
DNS server 2:	9.9.9.9
DNS server 3:	8.8.8.8

https://pve.proxmox.com/pve-docs/pct.1.html Command to execute modifications on Containers LXC.