Hacker Newsnew | past | comments | ask | show | jobs | submit | nZac's commentslogin

> SmartOS is a "live OS", it is always booted via PXE, ISO, or USB Key and runs entirely from memory, allowing the local disks to be used entirely for hosting virtual machines without wasting disks for the root OS.

Does anyone know if something like this is possible with Proxmox? I've got three servers I'm thinking of setting up as a small cluster and would like to boot them from a single image instead of manually setting PVE on each. Ansible or salt is an option but that tends to degrade over time.


It's close, but there are some missing pieces I think. The way it manages storage pools would fit your use case, if you import a zpool, for example, it will scan the datasets and can figure out what zvols should be attached to which VMs..

but there's also VM config info under `/etc/pve` or something similar. I'm pretty sure that's some kind of FUSE filesystem, it's supposed to be synchronized between cluster members.. you might be able to host that externally somehow. But that'll probably take some effort.

You'll also need to figure out how to configure `/etc/network/interfaces` on boot for your network config. But that's doable.

Would be pretty neat.


It depends on what "this" you meant, but in general the ways of netbooting an OS are many and varied. You'd have to declare what kind of root device you ultimately want, such as root on iSCSI.

Personally, I feel that "smartOS does not support booting from a local block device like a normal, sane operating system" might be a drawback and is a peculiar thing to brag about.


There was a brilliant incident back in the joyent days where they accidentally rebooted an entire datacenter and ended up dossing their dhcp server ;)


SmartOS can, of course, boot from a local zfs pool, but it treats it logically as just another source for the bootable image. See the piadm(8) command.


What I'm looking to achieve are three identical proxmox host boxes. As soon as you finish the install you now have three snowflakes no matter how hard you try.

In the case of smartOS (which I've never used) it would seem like that is achieved in the design because the USB isn't changing. Reboot and you are back to a clean slate.

Isn't this how game arcades boot machines? They all netboot from a single image for the game you have selected? That is what it seems smartOS is doing but maybe I'm missing the point.


It doesn't look like it's achievable with vanilla Proxmox.

I think if you really-really want declaratively for host machines, you'd need to ditch Proxmox in favor of Incur on top of NixOS.

There is also https://github.com/SaumonNet/proxmox-nixos, but it's pretty new and therefore full of rough edges.


You can boot ProxMox VMs via PXE:

https://blog.kail.io/pxe-booting-on-proxmox.html

But why bother? A read-only disk image would be simpler.


Pretty sure they want to boot the hypervisor itself via PXE, not the VMs.


rather deeper rabbit hole than installing 3 x proxmox, i think..but it exists...https://warewulf.org/

lots of other stuff will do the "boot from single image" part...say...https://fogproject.org/


Kind of. You can run Talos on Proxmox so I don't see why you couldn't run this, but frankly I'd just install Talos or SmartOS on the metal like god intended.


Airtonomy | Remote/Onsite | Full-time | https://www.airtonomy.ai/

We are a growing team of software engineers, robotics specialists, aviation experts, and machine learning professionals building the software that industries are adopting for managing their drone and robot fleets.

We are looking for senior engineers:

- Full-stack Cloud Engineers (Go, Svelte, Postgres, Kafka)

- Senior Robotics Engineers (C++, Python, ROS, PX4)

- DevOps Engineers (Hashicorp Stack, AWS & Azure)

Check out a full job description at https://jobs.airtonomy.ai/jobs/Careers


Another vote for Alembic, especially if you use SQLAlchemy in your app. I can't say enough positive things about the 1-2 punch of SQLAlchemy and Alembic if you are dealing with relational databases.

Some technical benefits to Alembic:

- It will give you the structure for upgrades and downgrades.

- Has a clean interface for DDL operations

- Supports every (?) database that SA does

- You can use it in "Offline" mode if you don't want to have Python and all the dependencies on the server or have to hand the migration off to someone else that has access.

- The branch feature is really nifty if you are in advanced situations.

Some non-technical benefits with Alembic

- It is open source

- zzzeek, the author, is pretty active on here and has built both SQLAlchemy and Alembic so there is a lot of cohesion in styles.

- The issue tracker is active and responsive

- The code is stable (something you want in a migration tool) and is unlikely to go anywhere.

Highly recommend.

Edit: Formatting


I moved from Boston to the upper Midwest in 2008 for school and haven't left. I tried moving back into the city and it was not enjoyable and left after 9 months (traffic... ugh, I don't know how you people do it!)

I live on 20 acres on the back side of a farm quarter, have a 2,000/sqft garden, a tractor, a big truck, ATV's, dirt bikes, a river in the back section of the property, wildlife, a dog, farm land, clean air, and the best drinking water! We regularly have bonfires, do target shooting, watch the sunset (and sunrise which can be even better!), and the stars are way bigger here.

I'm about 20 mins out of "town" which is about 60-90K people. I rent a small 12x12 office in town for $200/mth where I get internet (75down/15up) to work. Considering my 3br, 2bth house rent is $400, I think I am ahead of most as far total cost of housing.

I have everything I need, most of what I want, and very little of what I don't want. It's a great lifestyle. I have found that the people here are what keeps me.

There are a few things to note...

1. Rural life requires that you be creative and assertive to survive, no one will entertain you. For example, if you want to attend a meetup every week on React... you better start one. Want to have your choice of farmers markets... you should just plant a garden. That isn't to say we don't have farmers markets, concerts, festivals or things like that but there are fewer of them and they aren't as grand as they are in other places. In general, we have "everything" but we don't have all the choices.

2. Building a community can be difficult unless you are intentional. I am active in my church which makes a big difference and is where I find most of my friends (my family is still in Boston). If I didn't have that, I don't know where I would find friends. This is especially hard if you are single. Often times, the people are very friendly. Don't expect to jump straight into a group and be best friends, things move slower, and take time. HOWEVER, once you earn trust you are "in" and the people care deeply about you. I can't even explain it. I can list at least 5 people right now that, if I called, would drop anything and come help with something. Anything from help with car troubles (it's cold and snowy in the winter) to more sensitive and private parts of life which take years to develop. Relationship, I am firmly convinced, is life.

3. If you actually move out into the country prepare to get dirty. We mow for 3 hours a week at least. At least 2-3 large trees fall on our property every year that need chopping / hauling / splitting / burning. Gravel roads can be tough on vehicles. There is snow to move and spring cleaning / fall prep. It's work, but very fulfilling work if you are used to being behind a computer all day.

4. Finding another remote programming job is hard unless you are in the top 1% of performers in which case they probably want you on site anyway. The competition for remote work is FIERCE, I was lucky to land the job I did and am so thankful for it. Save some money just in case because you never know what could happen.

5. Don't expect to "change" things over night, everything is slower. People are open to listening to new perspectives but don't expect them to adopt them right away or ever.

AMA.


Checkout Keg (https://github.com/level12/keg)

It could use some documentation and some community TLC, but Level 12 is a solid Python shop with a pragmatic approach to app development. There are libraries for auth, login, webgrids, SQLAlchemy, forms, etc etc.

Disclaimer: I used to work for Level 12 and wrote a large production app atop keg.


The added benefit for me are, staying in the terminal where I do more than just edit, normal mode makes file navigation and text manipulation an extension of thinking, fast file switching, cross platform consistency, and a low maintenance burden (though the initial learning curve/setup is steep).

I work on Python apps all day and am constantly running she'll commands, interacting with git, starting / stopping services. Along with tmux, I can switch projects incredibly fast without having to wait for an IDE to load.

If you don't interact with text most of the day, I am not sure Vim is worth the curve.


Do you mean that because a book doesn't write itself, which is an impossible task, it can't be true? That seems to remove the possibility to know anything from a written text including science, history, autobiographies, and other forms of non-fiction.


Any written text can be either true or false, fiction and mythology have always been wildly popular. The bible, like all works of fiction, was made up by men.

> That seems to remove the possibility to know anything from a written text including science, history, autobiographies, and other forms of non-fiction.

Things aren't true because they're written, they're true because they can be verified as true; writing merely adds the possibility to pass on the knowledge required to verify a truth. Absent re-verification, nothing is true simply because someone wrote it down.


I've heard it described as confusion between cause and agency. Just because you know how something happened doesn't explain that thing's purpose or that it doesn't have intent.

I may have been in the Toyota factory and even met the engineers who designed the cars. That doesn't mean I understand the full intent of Toyota's board of directors.


The Koran and Dianetics didn't write themselves either. Are they true? If not, why not?


I use tmuxinator to manage all of my tmux sessions.

While, I could write tmux scripts for everything the yaml format does just about everything I need.

I treat a session as a project, for example mux dotfiles will open a tmux session, cd into the correct directory, and setup and panes I want when working with my config, just one. On a customer project I often have one window for vim, then another window for the server to run, psql, and any additional services I need.

I have also found, prefix-s to be very helpful to switch between projects very quickly.


We just commit our dependencies into our project repository in wheel format and install into a virtual env on prod from that directory eliminating PyPi. Though I don't know many other that do this. Do you?

Bitbucket and GitHub are reliable enough for how often we deploy that we aren't all that worried about downtime from those services. We could also pull from a dev's machine should the situation be that dire.

We have looked into Docker but that tool has a lot more growing before "I" would feel comfortable putting it into production. I would rather ship a packaged VM than Docker at this point, there are to many gotchas that we don't have time to figure out.


You put the wheels into a git repo? That's the most sad thing I've heard today. You know that if you add a file in commit A and remove it in Commit B each and every clone still pulls in that file? It's okay for text files but it's very much not okay for binaries and packages.


    git clone --depth=1 path/to/repo
when doing a clone for a deploy, since you don't need the history

edit: but yes, cloning as a developer will take a long time. But, if it really gets out of hand, I can hand new devs a HDD with the repo on it, and they can just pull recent changes. Not ideal, but pretty workable


we download to a folder on the docker build server and build docker containers from this cache.

see here: http://stackoverflow.com/a/29936384/138469


My concern revolves around credibility. They took a beating after Heartbleed regarding the cost of revocation for certificates/credentials affected. While that is mostly a business decision on their end– it raises concerns about what their business is about. Nothing is "free", it just might not cost currency. "If you don't pay for the service, you are the service."

Since I don't have experience with them I am looking for some level of assurance that they are a legitimate service. In my opinion it is difficult to gain that assurance just from their website.


Heartbleed had nothing to do with certs themselves, but instead, with how OpenSSL implemented an aspect of connection negotiation. Hence, the issue was isolated to OpenSSL not other SSL implementations or the SSL/TLS standards themselves.

In terms of "credibility", the issue comes down to how many browsers include their root cert by default. As far as I know, IE, Firefox, and Chrome include it meaning that it will be trusted by default.

The way they make money is selling other types of services such as wildcard and "green bar" certs. I think the folks running it want to see a wider use of SSL, and see providing free host-based certs as a good way to accomplish that goal. Bear mind, there zero cost to signing a cert ...


I have paid wildcard certs with them. Their site is weirdly designed and heavy on the self-service, but I have no complaints about them. I have revoked certs with them and everything has been reasonable.

That said, why does it matter if they're "credible"? Their certs are accepted by pretty much every browser, OS and library, and they have a long track record as a CA.

Regardless, as a business I have had business dealings with, let me assure you they are a "legitimate service".


I currently use them and have no issues. I'm a validated customer and they take even the personal validations very seriously. They even check based on domain names, if you have financial in your domain name, be prepared to be questioned on why you are getting a free ssl certificate.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: