Comment

Comment on virtualizing PFSense. What else works besides ESXi for virtual networking?

tofubl@discuss.tchncs.de ⁨4⁩ ⁨months⁩ ago

Very informative, thank you.

I am generally very comfortable with Linux, but somehow this seems intimidating.

Although I guess I’m not using proxmox for anything other than managing VMs, network bridges and backups. Well, and for the feeling of using something that was set up by people who know what they’re doing and not hacked together by me until it worked…

source

Sort:hotnew top

TCB13@lemmy.world ⁨4⁩ ⁨months⁩ ago

I guess I’m not using proxmox for anything other than managing VMs, network bridges and backups.

And LXD/Incus can do that as well for you. Install it an by running incus init it will ask you a few questions and get an automated setup with networking, storage etc. all running and ready for you to create VMs/Containers.

What I was saying is that you can also ignore the default / automated setup and install things manually if you’ve other requirements.

source
- tofubl@discuss.tchncs.de ⁨4⁩ ⁨months⁩ ago
  Okay, I think I found a bit of a catch with Incus or LXD. I want a solution with a web UI, and while Incus has one, it seems to have access control either browser certificate based or with a central auth server. Neither are a good solution for me - I would much prefer regular user auth with the option to use an auth server at some point (but I don’t want to take all of this on all at once.)
  
  I hope it’s okay that I keep coming back to you with these questions. You seem to be a strong Incus-evangelist. :)
  
  source
  - TCB13@lemmy.world ⁨4⁩ ⁨months⁩ ago
    You aren’t wrong, the WebUI is stateless, it doesn’t know of any users nor it stores any other context information.
    
    The certificates are required for the UI client to authenticate with the underlying LXD server itself. Much like the SSH authentication is boils down to creating a public/private key pair and the PK is added to your browser(s) and the public key to the server. I believe this is a good walkthrough of the process for anyone starting out.
    
    At work we use Authelia and HAProxy to get around the need to distribute a certificate for each client. At home I simply use Nginx as a reverse proxy to the WebUI with the proxy_ssl_certificate passing a certificate down to it. Here another configuration example of how to use Nginx to pass the certificate.
    
    source
    tofubl@discuss.tchncs.de ⁨4⁩ ⁨months⁩ ago
    Thanks for your patience. I appreciate it and I’m learning a lot. 🙏
    
    There’s a chance yet!
    
    source