Comment on proxmox: Do you use a headless Linux OS as a VM?

• towerful@programming.dev ⁨9⁩ ⁨months⁩ ago

  I use multiple VMs, and group things either by security layer or by purpose.

  When organising by purpose, I have a VM for reverse proxies. Then I have a VM for middleware/services. Another VM (or multiple) for database(s). Another VM for backend/daemon type things.
  Most of them end up running docker, but still.

  Lets me tightly control access between layers of the application (if the reverse proxy gets pwnd, the damage is hopefully contained there. If they get through that, the only get to the middleware. Ideally the database is well protected. Of course, none of that really matters when there’s a bug in my middleware code!)

  Another way to do it is by purpose.
  Say you have a media server things, network management things, CCTV things, productivity apps etc.
  Grouping all the media server things in a VM means your DNS or whatever doesn’t die when you wiff an update to the media server. Or you don’t lose your CCTV when you somehow link it’s storage directory into the media server then accidentally delete it. If that makes sense.

  Another way might be by backup strategy.
  A database hopefully has point in time backup/recovery systems in place. Whereas a reverse proxy is just some config (hopefully stored on GitHub) and can easily be rebuilt from scratch.
  So you could also separate things by how “live” the data is, or how often something is backed up, or how often something gets reconfigured/tweaked/updated.

  I use VMs to section things out accordingly.
  Takes a few extra GB of storage/memory, has a minor performance impact. But it limits the amount of damage my dumb ass can do.

  source
• cwagner@lemmy.cwagner.me ⁨9⁩ ⁨months⁩ ago

  [deleted]

  source

  • thirdBreakfast@lemmy.world ⁨9⁩ ⁨months⁩ ago

    I run one VM which some small docker containers go on, but whenever I’m trying something out it’s always in a Debian or Ubuntu VM - things just usually work easier. If it turns out to be a service I’m serious about running, then I’ll sometimes spend the time to set it up in it’s own LXC. Even a single Docker container.

    I much prefer each service in it’s own VM or LXC - for that same reason. Easier backups, easier to move to other nodes, easier to see the resources being used.

    @moddy with that processor and your 8GB you have plenty of room to play with multiple VM’s. Headless Ubuntu is probably the best place to start just because of the volume of results you get when googling issues. Enjoy.

    source

    • moddy@feddit.de ⁨9⁩ ⁨months⁩ ago

      Ok, i will have to check out what a LXC is before i start, but that helped a lot. Thanks

      source

      • thirdBreakfast@lemmy.world ⁨8⁩ ⁨months⁩ ago

        It’s a bit like docker, in that it’s a sort of isolated system, but you use it more like a virtual machine (VM). It’s lighter than a VM because it uses the host kernel so you can run lots of them with out consuming too many resources.

        In the Proxmox web interface, up in the top right corner there’s a “Create CT” button. If you click through all that (once again I am recommending Ubuntu) you’ll have your first LXC container up in a couple of minutes - the quick creating is another advantage over VM’s. One of the joys of your excellent choice of Proxmox as a base is that you can easily experiment with such things.

        source
• mhzawadi@lemmy.horwood.cloud ⁨9⁩ ⁨months⁩ ago

  I run a vm for each service, a php vm, a mysql vm, etc. But yes you could just have a big vm run everything

  source

  • SeeJayEmm@lemmy.procrastinati.org ⁨8⁩ ⁨months⁩ ago

    At that point why even run proxmox.

    source
• grue@lemmy.world ⁨9⁩ ⁨months⁩ ago

  Another question: Why do you have several debians-vm’s? You also could take one, right?

  As I wrote in my other reply, you typically want a separate VM for each service so that the OS configurations don’t conflict, and also so that you can shut down the VM for one service (e.g. for installing updates or migrating to another cluster node) without causing downtime to other services.

  source