mirror of
https://github.com/MacRimi/ProxMenux.git
synced 2026-11-02 19:02:31 +00:00
Describe the storage sharing behaviour as the scripts run it
- A local disk is registered in Proxmox only when As Proxmox storage is marked - Test NFS Connectivity checks ping, port 2049 and the export list - Proxmox keeps CIFS passwords with mode 0600, protected by access control
This commit is contained in:
@@ -78,7 +78,7 @@
|
||||
"Pick the filesystem — see the table above for trade-offs.",
|
||||
"Storage ID (default <code>disk-<device></code>), mount path, content-type preset.",
|
||||
"Confirm at the <strong>FINAL CONFIRMATION — DATA WILL BE ERASED</strong> dialog.",
|
||||
"ProxMenux clears the partition table and creates one partition spanning the disk. It runs <code>mkfs.<fs></code> or <code>zpool create</code> and mounts the result. Regular filesystems get an entry in <code>/etc/fstab</code> by UUID with <code>defaults,nofail</code>; ZFS uses its pool mount configuration instead. Registration uses <code>pvesm add dir</code> or <code>pvesm add zfspool</code>."
|
||||
"ProxMenux clears the partition table and creates one partition spanning the disk. It runs <code>mkfs.<fs></code> or <code>zpool create</code> and mounts the result. Regular filesystems get an entry in <code>/etc/fstab</code> by UUID with <code>defaults,nofail</code>; ZFS uses its pool mount configuration instead. If <em>As Proxmox storage</em> is marked (always the case for ZFS), it is then registered with <code>pvesm add dir</code> or <code>pvesm add zfspool</code>; otherwise it stays a host mount only."
|
||||
],
|
||||
"tipTitle": "Why UUID + nofail in /etc/fstab",
|
||||
"tipBody": "The script writes <code>UUID=… /mnt/<id> <fs> defaults,nofail 0 2</code>. UUID survives device reordering across reboots (so <code>/dev/sdc</code> becoming <code>/dev/sdd</code> does not break boot). <code>nofail</code> means that if the disk ever disappears (hardware failure, unplugged), Proxmox still boots — storage will just show as inactive until the disk comes back."
|
||||
|
||||
@@ -145,7 +145,7 @@
|
||||
"showmountTitle": "\"Failed to connect\" from showmount",
|
||||
"showmountBody": "The server refused the export-list query. Common causes: the server enforces strict client ACLs (your Proxmox IP is not on the allowed list), <code>rpcbind</code> is not running on the server, or the server exposes only NFSv4 with <code>showmount</code> disabled. The export path can still be added manually if you know it.",
|
||||
"inactiveTitle": "Storage shows as inactive in the Proxmox UI",
|
||||
"inactiveBody": "Run <em>Test NFS Connectivity</em> first to investigate DNS, ports and mount access. If connectivity works but storage remains inactive, inspect <code>journalctl -u pvestatd</code> and the server/export configuration. Restore the underlying connectivity or permissions first. <code>pvesm set <id> --disable 0</code> enables a disabled storage; it is not a general repair for NFS failures.",
|
||||
"inactiveBody": "Run <em>Test NFS Connectivity</em> first: it checks that the server answers ping, that port 2049 is open and that the export list (<code>showmount -e</code>) is available. If connectivity works but storage remains inactive, inspect <code>journalctl -u pvestatd</code> and the server/export configuration. Restore the underlying connectivity or permissions first. <code>pvesm set <id> --disable 0</code> enables a disabled storage; it is not a general repair for NFS failures.",
|
||||
"lxcNoWriteTitle": "fstab mount works but unprivileged LXC can't write through a bind-mount",
|
||||
"lxcNoWriteBody": "NFS access depends on server-side ownership, ACLs and squash settings. CIFS-style options such as <code>uid=</code> and <code>file_mode=</code> do <strong>not</strong> apply to NFS. With default LXC mapping, CT root becomes host UID 100000, not remote UID 0. Configure access for the actual mapped UID/GID or the server’s anonymous identity. <code>no_root_squash</code> only affects remote UID 0, so it is not a universal fix for UID 100000. The script attempts <code>chmod 1777</code> but cannot override the server’s permissions.",
|
||||
"fstabBootTitle": "fstab mount does not come up after reboot",
|
||||
|
||||
@@ -91,7 +91,7 @@
|
||||
"warnTitle": "Live VM disks on CIFS",
|
||||
"warnBody": "Selecting <code>images</code> triggers a ProxMenux warning that CIFS/SMB can cause locking issues with VM disk operations. The script recommends NFS for VM disk images but lets you continue. Backups and ISOs are common CIFS uses. Assess locking, snapshots, migration and workload requirements before using CIFS for <code>images</code>.",
|
||||
"credsTitle": "Where pvesm stores credentials",
|
||||
"credsBody": "The password is not written in <code>/etc/pve/storage.cfg</code>. Proxmox writes plaintext credentials in <code>/etc/pve/priv/storage/<storage-id>.pw</code>, protected by the private cluster filesystem directory accessible to <code>root</code>. Do not assume a fixed file mode of <code>0600</code> or encryption. After a server password change, use <code>pvesm set <id> --password <new></code> or remove and re-add through ProxMenux."
|
||||
"credsBody": "The password is not written in <code>/etc/pve/storage.cfg</code>. Proxmox writes plaintext credentials in <code>/etc/pve/priv/storage/<storage-id>.pw</code>, inside the private area of the cluster filesystem, readable only by <code>root</code> (mode <code>0600</code>); it is protected by access control, not by encryption. After a server password change, use <code>pvesm set <id> --password <new></code> or remove and re-add through ProxMenux."
|
||||
},
|
||||
"fstabBranch": {
|
||||
"heading": "Method B — Host fstab mount only",
|
||||
|
||||
Reference in New Issue
Block a user