[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"public-config":3,"i-flag:ph-4x3":14,"i-flag:us-4x3":19,"i-flag:de-4x3":21,"i-flag:hk-4x3":23,"i-tabler:lifebuoy":25,"i-tabler:timeline":28,"i-tabler:apps":30,"i-tabler:package":32,"i-tabler:circle-half-2":34,"i-tabler:sun":36,"i-tabler:moon":38,"i-tabler:menu-2":40,"i-tabler:user":42,"i-tabler:notebook":44,"i-simple-icons:forgejo":46,"i-tabler:shield-lock":48,"i-tabler:tools":50,"i-tabler:calendar":52,"i-tabler:x":54,"$fl8sxc8j5dcaq":56,"i-tabler:arrow-left":113,"i-tabler:tag":115},{"matomo":4,"booking":7,"site":9,"blog":11,"newsletter":12},{"enabled":5,"siteId":6},true,"7",{"enabled":5,"url":8},"https:\u002F\u002Fcal.com\u002Fjdbungart",{"url":10},"https:\u002F\u002Fjdneer.com",{"enabled":5},{"enabled":13},false,{"left":15,"top":15,"width":16,"height":17,"rotate":15,"vFlip":13,"hFlip":13,"body":18},0,640,480,"\u003Cpath fill=\"#0038a8\" d=\"M0 0h640v240H0z\"\u002F>\u003Cpath fill=\"#ce1126\" d=\"M0 240h640v240H0z\"\u002F>\u003Cpath fill=\"#fff\" d=\"M415.7 240L0 480V0\"\u002F>\u003Cpath fill=\"#fcd116\" d=\"M26.7 42.4L41 55l16.6-9.2l-7.4 17.5l14 13l-19-1.6l-8.1 17.2l-4.3-18.5L14 71l16.3-10zm323.8 172.3l.4 19l18 6.3l-18 6.2l-.4 19l-11.5-15.1l-18.2 5.5l10.8-15.6l-10.8-15.6l18.2 5.5zM37.2 388.1l8 17.2l19-1.6l-13.9 13l7.4 17.5l-16.6-9.1l-14.4 12.4l3.6-18.7L14 409l18.9-2.4zm114.2-249l-6.2 6.2l3.1 47l-3 .3l-5.7-42.9l-5.1 5l7.6 38.4a48 48 0 0 0-17.2 7.1l-21.7-32.4H96l26.4 34.3l-2.4 2l-31.1-35.5h-8.8v8.8l35.4 31l-2 2.5l-34.3-26.3v7.1l32.5 21.7q-5.2 7.8-7.1 17.2L66.3 223l-5.1 5l42.9 5.7q-.3 1.6-.3 3.1l-47-3l-6.2 6.2l6.2 6.2l47-3.1l.3 3.1l-42.9 5.7l5 5l38.4-7.6a48 48 0 0 0 7.1 17.2l-32.5 21.7v7.2l34.3-26.3l2 2.4l-35.4 31v8.8H89l31-35.4l2.5 2L96 312.2h7.2l21.7-32.5q7.8 5.2 17.2 7.1l-7.6 38.4l5 5l5.7-42.9q1.5.3 3.1.3l-3 47l6.1 6.2l6.3-6.2l-3.1-47l3-.3l5.7 43l5.1-5.1l-7.6-38.4a48 48 0 0 0 17.2-7.1l21.7 32.5h7.2l-26.4-34.3l2.4-2l31.1 35.4h8.8v-8.8l-35.4-31l2-2.4l34.3 26.3v-7.2l-32.5-21.7q5.2-7.8 7.1-17.2l38.3 7.6l5.1-5l-42.9-5.7q.3-1.5.3-3.1l47 3l6.2-6.1l-6.2-6.2l-47 3l-.3-3l42.9-5.7l-5-5l-38.4 7.5a48 48 0 0 0-7.1-17.2l32.5-21.7v-7.1l-34.3 26.3l-2-2.4l35.4-31v-8.9H214l-31 35.5l-2.5-2l26.4-34.3h-7.2L178 200.2q-7.8-5.2-17.2-7.1l7.6-38.3l-5-5l-5.7 42.8l-3.1-.3l3-47z\"\u002F>",{"left":15,"top":15,"width":16,"height":17,"rotate":15,"vFlip":13,"hFlip":13,"body":20},"\u003Cpath fill=\"#bd3d44\" d=\"M0 0h640v480H0\"\u002F>\u003Cpath stroke=\"#fff\" stroke-width=\"37\" d=\"M0 55.3h640M0 129h640M0 203h640M0 277h640M0 351h640M0 425h640\"\u002F>\u003Cpath fill=\"#192f5d\" d=\"M0 0h364.8v258.5H0\"\u002F>\u003Cmarker id=\"SVGEq3dreKJ\" markerHeight=\"30\" markerWidth=\"30\">\u003Cpath fill=\"#fff\" d=\"m14 0l9 27L0 10h28L5 27z\"\u002F>\u003C\u002Fmarker>\u003Cpath fill=\"none\" marker-mid=\"url(#SVGEq3dreKJ)\" d=\"m0 0l16 11h61h61h61h61h60L47 37h61h61h60h61L16 63h61h61h61h61h60L47 89h61h61h60h61L16 115h61h61h61h61h60L47 141h61h61h60h61L16 166h61h61h61h61h60L47 192h61h61h60h61L16 218h61h61h61h61h60z\"\u002F>",{"left":15,"top":15,"width":16,"height":17,"rotate":15,"vFlip":13,"hFlip":13,"body":22},"\u003Cpath fill=\"#fc0\" d=\"M0 320h640v160H0z\"\u002F>\u003Cpath fill=\"#000001\" d=\"M0 0h640v160H0z\"\u002F>\u003Cpath fill=\"red\" d=\"M0 160h640v160H0z\"\u002F>",{"left":15,"top":15,"width":16,"height":17,"rotate":15,"vFlip":13,"hFlip":13,"body":24},"\u003Cpath fill=\"#ec1b2e\" d=\"M0 0h640v480H0\"\u002F>\u003Cpath id=\"SVG5tfvBPpj\" fill=\"#fff\" d=\"M346.3 103.1C267 98 230.6 201.9 305.6 240.3c-26-22.4-20.6-55.3-10.1-72.4l1.9 1.1c-13.8 23.5-11.2 52.7 11.1 71c-12.7-12.3-9.5-39 12.1-48.9s23.6-39.3 16.4-49.1q-14.7-25.6 9.3-38.9M307.9 164l-4.7 7.4l-1.8-8.6l-8.6-2.3l7.8-4.3l-.6-8.9l6.5 6.1l8.3-3.3l-3.7 8.1l5.6 6.8z\"\u002F>\u003Cuse href=\"#SVG5tfvBPpj\" transform=\"rotate(72 312.5 243.5)\"\u002F>\u003Cuse href=\"#SVG5tfvBPpj\" transform=\"rotate(144 312.5 243.5)\"\u002F>\u003Cuse href=\"#SVG5tfvBPpj\" transform=\"rotate(216 312.5 243.5)\"\u002F>\u003Cuse href=\"#SVG5tfvBPpj\" transform=\"rotate(288 312.5 243.5)\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":27},24,"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M8 12a4 4 0 1 0 8 0a4 4 0 1 0-8 0\"\u002F>\u003Cpath d=\"M3 12a9 9 0 1 0 18 0a9 9 0 1 0-18 0m12 3l3.35 3.35M9 15l-3.35 3.35m0-12.7L9 9m9.35-3.35L15 9\"\u002F>\u003C\u002Fg>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":29},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"m4 16l6-7l5 5l5-6\"\u002F>\u003Cpath d=\"M14 14a1 1 0 1 0 2 0a1 1 0 1 0-2 0M9 9a1 1 0 1 0 2 0a1 1 0 1 0-2 0m-6 7a1 1 0 1 0 2 0a1 1 0 1 0-2 0m16-8a1 1 0 1 0 2 0a1 1 0 1 0-2 0\"\u002F>\u003C\u002Fg>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":31},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M4 5a1 1 0 0 1 1-1h4a1 1 0 0 1 1 1v4a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1zm0 10a1 1 0 0 1 1-1h4a1 1 0 0 1 1 1v4a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1zm10 0a1 1 0 0 1 1-1h4a1 1 0 0 1 1 1v4a1 1 0 0 1-1 1h-4a1 1 0 0 1-1-1zm0-8h6m-3-3v6\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":33},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"m12 3l8 4.5v9L12 21l-8-4.5v-9zm0 9l8-4.5M12 12v9m0-9L4 7.5m12-2.25l-8 4.5\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":35},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M3 12a9 9 0 1 0 18 0a9 9 0 1 0-18 0m9-9v18m0-7l7-7m-7 12l8.5-8.5M12 9l4.5-4.5\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":37},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M8 12a4 4 0 1 0 8 0a4 4 0 1 0-8 0m-5 0h1m8-9v1m8 8h1m-9 8v1M5.6 5.6l.7.7m12.1-.7l-.7.7m0 11.4l.7.7m-12.1-.7l-.7.7\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":39},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M12 3h.393a7.5 7.5 0 0 0 7.92 12.446A9 9 0 1 1 12 2.992z\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":41},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M4 6h16M4 12h16M4 18h16\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":43},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M8 7a4 4 0 1 0 8 0a4 4 0 0 0-8 0M6 21v-2a4 4 0 0 1 4-4h4a4 4 0 0 1 4 4v2\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":45},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M6 4h11a2 2 0 0 1 2 2v12a2 2 0 0 1-2 2H6a1 1 0 0 1-1-1V5a1 1 0 0 1 1-1m3 0v18m4-14h2m-2 4h2\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":47},"\u003Cpath fill=\"currentColor\" d=\"M16.777 0a2.9 2.9 0 1 1-2.529 4.322H12.91a4.266 4.266 0 0 0-4.265 4.195v2.118a7.08 7.08 0 0 1 4.147-1.42l.118-.002h1.338a2.9 2.9 0 0 1 5.43 1.422a2.9 2.9 0 0 1-5.43 1.422H12.91a4.266 4.266 0 0 0-4.265 4.195v2.319A2.9 2.9 0 0 1 7.222 24A2.9 2.9 0 0 1 5.8 18.57V8.589a7.11 7.11 0 0 1 6.991-7.108l.118-.001h1.338A2.9 2.9 0 0 1 16.778 0M7.223 19.905a1.194 1.194 0 1 0 0 2.389a1.194 1.194 0 0 0 0-2.389m9.554-10.464a1.194 1.194 0 1 0 0 2.389a1.194 1.194 0 0 0 0-2.39m0-7.735a1.194 1.194 0 1 0 0 2.389a1.194 1.194 0 0 0 0-2.389\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":49},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M12 3a12 12 0 0 0 8.5 3A12 12 0 0 1 12 21A12 12 0 0 1 3.5 6A12 12 0 0 0 12 3\"\u002F>\u003Cpath d=\"M11 11a1 1 0 1 0 2 0a1 1 0 1 0-2 0m1 1v2.5\"\u002F>\u003C\u002Fg>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":51},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M3 21h4L20 8a1.5 1.5 0 0 0-4-4L3 17zM14.5 5.5l4 4\"\u002F>\u003Cpath d=\"M12 8L7 3L3 7l5 5M7 8L5.5 9.5M16 12l5 5l-4 4l-5-5m4 1l-1.5 1.5\"\u002F>\u003C\u002Fg>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":53},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M4 7a2 2 0 0 1 2-2h12a2 2 0 0 1 2 2v12a2 2 0 0 1-2 2H6a2 2 0 0 1-2-2zm12-4v4M8 3v4m-4 4h16m-9 4h1m0 0v3\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":55},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M18 6L6 18M6 6l12 12\"\u002F>",{"slug":57,"title":58,"excerpt":59,"image":60,"publishedAt":61,"topics":62,"readMinutes":66,"html":67,"metaTitle":58,"metaDescription":68,"shareImage":69,"updatedAt":73,"author":74,"related":76},"cost-efficient-virtual-machine-clustering-with-proxmox-ve-for-smes-and-enterprises","Cost-efficient Virtual Machine Clustering with Proxmox VE for SMEs and Enterprises","Proxmox VE is a web based, open source hardware virtualization platform based on Debian GNU\u002FLinux. It allows for virtualizing unmodified guests using the kernel based virtual machine (KVM) which is the native implementation of hardware assisted virtualization that's embedded into the linux kernel. In addition, Proxmox VE also supports Linux containers (LXC) being an OS level type of virtualization. Hardware assisted virtualization requires special support of a machine's processor commonly known","\u002Fcontent\u002Fimages\u002F2018\u002F09\u002FIMG_20180927_002650_1500-1.jpg","2018-09-29T22:37:00.000+08:00",[63],{"key":64,"label":65},"guides","Guides",6,"\u003Cp>Proxmox VE is a web based, open source hardware virtualization platform based on Debian GNU\u002FLinux. It allows for virtualizing unmodified guests using the \u003Ca href=\"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FKernel-based_Virtual_Machine?ref=ghost.jdneer.com\">kernel based virtual machine\u003C\u002Fa> (KVM) which is the native implementation of \u003Ca href=\"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FHardware-assisted_virtualization?ref=ghost.jdneer.com\">hardware assisted virtualization\u003C\u002Fa> that's embedded into the linux kernel. In addition, Proxmox VE also supports \u003Ca href=\"https:\u002F\u002Flinuxcontainers.org\u002F?ref=ghost.jdneer.com\">Linux containers (LXC)\u003C\u002Fa> being an \u003Ca href=\"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FOperating-system-level_virtualization?ref=ghost.jdneer.com\">OS level type of virtualization\u003C\u002Fa>.\u003C\u002Fp>\u003Cp>Hardware assisted virtualization requires special support of a machine's processor commonly known as \u003Ca href=\"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FX86_virtualization?ref=ghost.jdneer.com#Intel_virtualization_(VT-x)\">Intel® Virtualization Technology (Intel® VT \u002F VT-x)\u003C\u002Fa> or \u003Ca href=\"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FX86_virtualization?ref=ghost.jdneer.com#AMD_virtualization_(AMD-V)\">Technology for Client Virtualization (AMD-V™ \u002F AMD SVM\u003C\u002Fa>).\u003C\u002Fp>\u003Cfigure class=\"kg-card kg-image-card kg-width-full kg-card-hascaption\">\u003Cimg src=\"\u002Fcontent\u002Fimages\u002F2018\u002F09\u002Fimage-2.png\" class=\"kg-image\" alt=\"\" loading=\"lazy\" width=\"1425\" height=\"780\" srcset=\"\u002Fcontent\u002Fimages\u002Fsize\u002Fw600\u002F2018\u002F09\u002Fimage-2.png 600w, \u002Fcontent\u002Fimages\u002Fsize\u002Fw1000\u002F2018\u002F09\u002Fimage-2.png 1000w, \u002Fcontent\u002Fimages\u002F2018\u002F09\u002Fimage-2.png 1425w\" \u002F>\u003Cfigcaption>\u003Cspan>Overview of Proxmox Web UI (Single-Node Deployment)\u003C\u002Fspan>\u003C\u002Ffigcaption>\u003C\u002Ffigure>\u003Cp>I've designed, deployed and maintained virtual system clusters using \u003Ca href=\"https:\u002F\u002Fwww.proxmox.com\u002Fen\u002Fproxmox-ve?ref=ghost.jdneer.com\">Proxmox VE\u003C\u002Fa> for several years. Mostly for international businesses. A more recent deployment is with Pacific Business Services, a rapidly expanding BPO with hundreds of agents located in Dumaguete City. We're currently in the first stage and once completed it will consist of two \u003Ca href=\"https:\u002F\u002Fwww.dell.com\u002Fdownloads\u002Fglobal\u002Fproducts\u002Fpedge\u002Fen\u002Fserver-poweredge-r610-specs-en.pdf?ref=ghost.jdneer.com\">Dell PowerEdge R610\u003C\u002Fa> - one per physical site - forming a virtual machine cluster (VMC) providing redundant infrastructure services such as Proxy, DNS, IDS, VPN, Backup, Web and Database related services.\u003C\u002Fp>\u003Cfigure class=\"kg-card kg-image-card kg-card-hascaption\">\u003Cimg src=\"\u002Fcontent\u002Fimages\u002F2018\u002F09\u002FIMG_20180926_231649_1500.jpg\" class=\"kg-image\" alt=\"\" loading=\"lazy\" width=\"1000\" height=\"1771\" srcset=\"\u002Fcontent\u002Fimages\u002Fsize\u002Fw600\u002F2018\u002F09\u002FIMG_20180926_231649_1500.jpg 600w, \u002Fcontent\u002Fimages\u002F2018\u002F09\u002FIMG_20180926_231649_1500.jpg 1000w\" sizes=\"(min-width: 720px) 720px\" \u002F>\u003Cfigcaption>\u003Cspan>Primary office of Pacific Business Services in Dumaguete City\u003C\u002Fspan>\u003C\u002Ffigcaption>\u003C\u002Ffigure>\u003Cp>Majority of clients source refurbished hardware from ITAD providers overseas. This includes the DELL server platforms used in this deployment. Arguably, with its \u003Ca href=\"https:\u002F\u002Fark.intel.com\u002Fproducts\u002F47922\u002FIntel-Xeon-Processor-X5650-12M-Cache-2-66-GHz-6-40-GT-s-Intel-QPI-?ref=ghost.jdneer.com\">Intel® Xeon® X5650\u003C\u002Fa> released in early 2010, the PowerEdge R610 seems pretty dated. \u003C\u002Fp>\u003Cp>However, the process of selecting the correct hardware involves a couple of questions;\u003C\u002Fp>\u003Cul>\u003Cli>Is the platform suitable for the use case at hand?\u003C\u002Fli>\u003Cli>Is the hardware fully compatible with the OS you're planning to run?\u003C\u002Fli>\u003Cli>Can the hardware components be upgraded? (e.g. RAM, CPUs, 10\u002F40GbE NICs, HW RAID, FiberChannel [...] )\u003C\u002Fli>\u003Cli>Does the  ITAD provider offer any optional warranty? If so, what's the coverage and does it make sense for the client?\u003C\u002Fli>\u003Cli>Will the vendor (e.g. DELL) continue to provide software updates for the platform and if so, approx. for how long? (BIOS, SMB\u002FIPMI, Peripherals [...])\u003C\u002Fli>\u003C\u002Ful>\u003Cp>With security vulnerabilities such as \u003Ca href=\"https:\u002F\u002Fmeltdownattack.com\u002F?ref=ghost.jdneer.com\">Spectre and Meltdown\u003C\u002Fa> turning the \u003Ca href=\"https:\u002F\u002Fwinbuzzer.com\u002F2018\u002F01\u002F04\u002Fcert-warns-way-fix-intel-kernel-security-flaw-replace-cpu-xcxwbn\u002F?ref=ghost.jdneer.com\">industry\u003C\u002Fa> upside down it's vital that used platforms will continue to receive software updates also in the immediate future.\u003C\u002Fp>\u003Cp>While there is no such thing as guarantee, at least in the case of DELL all variants of Spectre and Meltdown have been addressed in recent BIOS versions all the way back to the 11th generation of its EMC portfolio of products (see \u003Ca href=\"https:\u002F\u002Fwww.dell.com\u002Fsupport\u002Farticle\u002Fph\u002Fen\u002Fphbsd1\u002Fsln308588\u002Fmicroprocessor-side-channel-vulnerabilities-cve-2017-5715-cve-2017-5753-cve-2017-5754-impact-on-dell-emc-products-dell-enterprise-servers-storage-and-networking-?lang=en&ref=ghost.jdneer.com\">here\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwww.dell.com\u002Fsupport\u002Farticle\u002Fph\u002Fen\u002Fphbsd1\u002Fsln309851\u002Fmicroprocessor-side-channel-vulnerabilities-cve-2018-3639-and-cve-2018-3640-impact-on-dell-emc-poweredge-servers-storage-sc-series-ps-series-and-powervault-md-series-and-networking-products?lang=en&ref=ghost.jdneer.com#bios\">here\u003C\u002Fa>).\u003C\u002Fp>\u003Cp>For instance, the \u003Ca href=\"https:\u002F\u002Fwww.dell.com\u002Fsupport\u002Fhome\u002Fph\u002Fen\u002Fphbsdt1\u002Fproduct-support\u002Fproduct\u002Fpoweredge-r610\u002Fdrivers?ref=ghost.jdneer.com\">latest release\u003C\u002Fa> for the BIOS of the PowerEdge R610 (11G) - being v6.6.0 from July 2018 - includes updated microcode addressing all recent variants of Spectre.\u003C\u002Fp>\u003Cfigure class=\"kg-card kg-image-card kg-card-hascaption\">\u003Cimg src=\"\u002Fcontent\u002Fimages\u002F2018\u002F09\u002Fimage-3.png\" class=\"kg-image\" alt=\"\" loading=\"lazy\" width=\"829\" height=\"335\" srcset=\"\u002Fcontent\u002Fimages\u002Fsize\u002Fw600\u002F2018\u002F09\u002Fimage-3.png 600w, \u002Fcontent\u002Fimages\u002F2018\u002F09\u002Fimage-3.png 829w\" sizes=\"(min-width: 720px) 720px\" \u002F>\u003Cfigcaption>\u003Cspan>Executable for Linux containing the latest BIOS version for PowerEdge R610\u003C\u002Fspan>\u003C\u002Ffigcaption>\u003C\u002Ffigure>\u003Cp>DELL offers a platitude of options when it comes to updating system components including the BIOS:\u003C\u002Fp>\u003Col>\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.dell.com\u002Fsupport\u002Farticle\u002Fph\u002Fen\u002Fphbsd1\u002Fsln296511\u002Fupdating-dell-poweredge-servers-via-bootable-media-iso?ref=ghost.jdneer.com\">Updating Dell PowerEdge servers via bootable media \u002F ISO\u003C\u002Fa>\u003C\u002Fli>\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.dell.com\u002Fsupport\u002Farticle\u002Fph\u002Fen\u002Fphbsd1\u002Fsln292363\u002Fpoweredge-server-updating-firmware-through-the-idrac?lang=en&ref=ghost.jdneer.com\">PowerEdge Server: Updating Firmware through the iDRAC\u003C\u002Fa>\u003C\u002Fli>\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.dell.com\u002Fsupport\u002Farticle\u002Fph\u002Fen\u002Fphbsd1\u002Fsln284433\u002Fwhat-is-bios-and-how-to-update-the-bios-on-your-dell-system?lang=en&ref=ghost.jdneer.com#How_to_update_USB_flash_drive\">How to Update Your System BIOS Using a USB Flash Drive\u003C\u002Fa> \u003C\u002Fli>\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.dell.com\u002Fsupport\u002Farticle\u002Fph\u002Fen\u002Fphbsd1\u002Fsln310654\u002Fdell-emc-system-update-dsu-?lang=en&ref=ghost.jdneer.com\">BIOS Updated via DELL EMC System Update (DSU)\u003C\u002Fa>\u003C\u002Fli>\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.dell.com\u002Fsupport\u002Fhome\u002Fph\u002Fen\u002Fphbsd1\u002Fdrivers\u002Fdriversdetails?driverId=0YV9D&osCode=RHE70&productCode=poweredge-r610&ref=ghost.jdneer.com\">Dell Update Packages for Linux (platform specific)\u003C\u002Fa>\u003C\u002Fli>\u003C\u002Fol>\u003Cp>In this case I been using Option No. 5 which requires a self-contained executable that can be downloaded from the drivers page of the respective server (use a Linux OS as platform when prompted).\u003C\u002Fp>\u003Cpre>\u003Ccode># file -sL BIOS_0YV9D_LN_6.6.0.BIN \nBIOS_0YV9D_LN_6.6.0.BIN: POSIX shell script executable (binary data)\n\n# bash BIOS_0YV9D_LN_6.6.0.BIN\u003C\u002Fcode>\u003C\u002Fpre>\u003Cp>The executable ends on \u003Ccode>.BIN\u003C\u002Fcode> being a shell script. It has the BIOS image appended in binary form. It can be executed simply by passing it as argument to the \u003Ccode>bash\u003C\u002Fcode> command.\u003C\u002Fp>\u003Cfigure class=\"kg-card kg-image-card kg-width-full kg-card-hascaption\">\u003Cimg src=\"\u002Fcontent\u002Fimages\u002F2018\u002F09\u002FIMG_20180926_213638_1500.jpg\" class=\"kg-image\" alt=\"\" loading=\"lazy\" width=\"1500\" height=\"847\" srcset=\"\u002Fcontent\u002Fimages\u002Fsize\u002Fw600\u002F2018\u002F09\u002FIMG_20180926_213638_1500.jpg 600w, \u002Fcontent\u002Fimages\u002Fsize\u002Fw1000\u002F2018\u002F09\u002FIMG_20180926_213638_1500.jpg 1000w, \u002Fcontent\u002Fimages\u002F2018\u002F09\u002FIMG_20180926_213638_1500.jpg 1500w\" \u002F>\u003Cfigcaption>\u003Cspan>Installing the latest BIOS version from within Proxmox VE (Debian Stretch).`\u003C\u002Fspan>\u003C\u002Ffigcaption>\u003C\u002Ffigure>\u003Cp>This PowerEdge R610 is equipped with 4x 900GB SAS drives running in a RAID10 providing for an effective capacity of 1.8TB. Installing Proxmox VE is straight forward. First, \u003Ca href=\"https:\u002F\u002Fwww.proxmox.com\u002Fen\u002Fdownloads\u002Fcategory\u002Fiso-images-pve?ref=ghost.jdneer.com\">download the latest ISO image\u003C\u002Fa> and transfer it to a flash drive.\u003C\u002Fp>\u003Cpre>\u003Ccode>$ time sudo dd bs=4M if=proxmox-ve_5.2-1.iso of=\u002Fdev\u002Fdisk\u002Fby-id\u002Fusb-JetFlash_Transcend_4GB_1R7MQ9WY-0:0 conv=fsync; sync; sync\u003C\u002Fcode>\u003C\u002Fpre>\u003Cp>With \u003Ccode>\u002Fdev\u002Fdisk\u002Fby-id\u002Fusb-JetFlash_Transcend_4GB_1R7MQ9WY-0:0\u003C\u002Fcode> being the absolute path to your flash drive. Once the process is complete unplug the drive from your workstation and plug it into any of the available USB ports of your server. Next, fire up the machine and boot from the pen drive by opening the boot manager during boot by pressing \u003Ccode>F11\u003C\u002Fcode>.\u003C\u002Fp>\u003Cfigure class=\"kg-card kg-image-card kg-width-full kg-card-hascaption\">\u003Cimg src=\"\u002Fcontent\u002Fimages\u002F2018\u002F09\u002FIMG_20180926_210234_1500.jpg\" class=\"kg-image\" alt=\"\" loading=\"lazy\" width=\"1500\" height=\"847\" srcset=\"\u002Fcontent\u002Fimages\u002Fsize\u002Fw600\u002F2018\u002F09\u002FIMG_20180926_210234_1500.jpg 600w, \u002Fcontent\u002Fimages\u002Fsize\u002Fw1000\u002F2018\u002F09\u002FIMG_20180926_210234_1500.jpg 1000w, \u002Fcontent\u002Fimages\u002F2018\u002F09\u002FIMG_20180926_210234_1500.jpg 1500w\" \u002F>\u003Cfigcaption>\u003Cspan>Reserving a new IP address on the mgmt segment while waiting for the Proxmox VE installer to finish.\u003C\u002Fspan>\u003C\u002Ffigcaption>\u003C\u002Ffigure>\u003Cp>\u003C\u002Fp>\u003Cp>Once the installation is complete you'll be prompted to reboot the machine. Once it's booted into the OS log in as the root user and execute the following steps to complete your initial setup:\u003C\u002Fp>\u003Cp>I encourage you to \u003Ca href=\"https:\u002F\u002Fwww.proxmox.com\u002Fen\u002Fproxmox-ve\u002Fpricing?ref=ghost.jdneer.com\">buy a subscription\u003C\u002Fa>. Why? Because you want to support the livelihood of the team behind proxmox and obviously because it enables access to the enterprise repository which provides for real-time updates.\u003C\u002Fp>\u003Cp>However, assuming that you're just starting out the community repository will suffice. On a default installations the Enterprise repository is enabled by default. In order to activate the community repository follow the steps outlined below:\u003C\u002Fp>\u003Cpre>\u003Ccode># rm \u002Fetc\u002Fapt\u002Fsources.list.d\u002Fpve-enterprise.list\u003C\u002Fcode>\u003C\u002Fpre>\u003Cp>First, remove the enterprise repository. If you don't you'll get an error when trying to update the repository cache.\u003C\u002Fp>\u003Cpre>\u003Ccode># cat <<EOF> \u002Fetc\u002Fapt\u002Fsources.list.d\u002Fproxmox.list\ndeb http:\u002F\u002Fdownload.proxmox.com\u002Fdebian stretch pve-no-subscription\nEOF\u003C\u002Fcode>\u003C\u002Fpre>\u003Cp>Afterwards install the community repository, refresh all software repositories, upgrade the entire system and reboot the machine.\u003C\u002Fp>\u003Cpre>\u003Ccode># apt update\n# apt full-upgrade -y\n# reboot\u003C\u002Fcode>\u003C\u002Fpre>\u003Cp>Afterwards you'll have a fully updated system. That is except features that have just been implemented as passing them down from the enterprise repository is intentionally being delayed. However, security related patches are being made available for both; the enterprise and community repositories!\u003C\u002Fp>\u003Cp>The default network configuration bridges the first available network interface of the machine. The configuration lives in \u003Ccode>\u002Fetc\u002Fnetwork\u002Finterfaces\u003C\u002Fcode> and while there are ways around it, changes made via web frontend will require you to reboot the machine in order to be applied.\u003Cbr \u002F>\u003C\u002Fp>\u003Cfigure class=\"kg-card kg-image-card kg-width-full\">\u003Cimg src=\"\u002Fcontent\u002Fimages\u002F2018\u002F09\u002FIMG_20180926_223218_1500-1.jpg\" class=\"kg-image\" alt=\"\" loading=\"lazy\" width=\"1500\" height=\"847\" srcset=\"\u002Fcontent\u002Fimages\u002Fsize\u002Fw600\u002F2018\u002F09\u002FIMG_20180926_223218_1500-1.jpg 600w, \u002Fcontent\u002Fimages\u002Fsize\u002Fw1000\u002F2018\u002F09\u002FIMG_20180926_223218_1500-1.jpg 1000w, \u002Fcontent\u002Fimages\u002F2018\u002F09\u002FIMG_20180926_223218_1500-1.jpg 1500w\" \u002F>\u003C\u002Ffigure>\u003Cp>Now is a good time to verify that all possible mitigations against Meltdown and Spectre are in place. In this regard the good folks within the INFOSEC community have been quite busy.\u003C\u002Fp>\u003Cp>In particular I want to give a\u003Cstrong> massive shoutout\u003C\u002Fstrong> to \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fspeed47?ref=ghost.jdneer.com\">Stéphane Lesimple (aka speed47)\u003C\u002Fa> a security professional with \u003Ca href=\"https:\u002F\u002Fwww.ovh.com\u002Fworld\u002F?ref=ghost.jdneer.com\">OVH\u003C\u002Fa> who developed the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fspeed47\u002Fspectre-meltdown-checker?ref=ghost.jdneer.com\">Spectre & Meltdown vulnerability\u002Fmitigation checker for Linux\u003C\u002Fa>. The utility is completely written in shell and runs on all linux as well as some BSD flavors without requiring any additional dependencies.\u003C\u002Fp>\u003Cp>In its current version the utility checks for and verifies the mitigation status for all Meltdown and Spectre vulnerabilies currently known - namingly:\u003C\u002Fp>\u003Cul>\u003Cli>\u003Ca href=\"https:\u002F\u002Fcve.mitre.org\u002Fcgi-bin\u002Fcvename.cgi?name=CVE-2017-5753&ref=ghost.jdneer.com\">CVE-2017-5753\u003C\u002Fa> [bounds check bypass] aka 'Spectre Variant 1'\u003C\u002Fli>\u003Cli>\u003Ca href=\"https:\u002F\u002Fcve.mitre.org\u002Fcgi-bin\u002Fcvename.cgi?name=CVE-2017-5715&ref=ghost.jdneer.com\">CVE-2017-5715\u003C\u002Fa> [branch target injection] aka 'Spectre Variant 2'\u003C\u002Fli>\u003Cli>\u003Ca href=\"https:\u002F\u002Fcve.mitre.org\u002Fcgi-bin\u002Fcvename.cgi?name=CVE-2017-5754&ref=ghost.jdneer.com\">CVE-2017-5754\u003C\u002Fa> [rogue data cache load] aka 'Meltdown' aka 'Variant 3'\u003C\u002Fli>\u003Cli>\u003Ca href=\"https:\u002F\u002Fcve.mitre.org\u002Fcgi-bin\u002Fcvename.cgi?name=CVE-2018-3640&ref=ghost.jdneer.com\">CVE-2018-3640\u003C\u002Fa> [rogue system register read] aka 'Variant 3a'\u003C\u002Fli>\u003Cli>\u003Ca href=\"https:\u002F\u002Fcve.mitre.org\u002Fcgi-bin\u002Fcvename.cgi?name=CVE-2018-3639&ref=ghost.jdneer.com\">CVE-2018-3639\u003C\u002Fa> [speculative store bypass] aka 'Variant 4'\u003C\u002Fli>\u003Cli>\u003Ca href=\"https:\u002F\u002Fcve.mitre.org\u002Fcgi-bin\u002Fcvename.cgi?name=CVE-2018-3615&ref=ghost.jdneer.com\">CVE-2018-3615\u003C\u002Fa> [L1 terminal fault] aka 'Foreshadow (SGX)'\u003C\u002Fli>\u003Cli>\u003Ca href=\"https:\u002F\u002Fcve.mitre.org\u002Fcgi-bin\u002Fcvename.cgi?name=CVE-2018-3620&ref=ghost.jdneer.com\">CVE-2018-3620\u003C\u002Fa> [L1 terminal fault] aka 'Foreshadow-NG (OS)'\u003C\u002Fli>\u003Cli>\u003Ca href=\"https:\u002F\u002Fcve.mitre.org\u002Fcgi-bin\u002Fcvename.cgi?name=CVE-2018-3646&ref=ghost.jdneer.com\">CVE-2018-3646\u003C\u002Fa> [L1 terminal fault] aka 'Foreshadow-NG (VMM)'\u003C\u002Fli>\u003C\u002Ful>\u003Cp>To run a full check on your machine you may executing the steps outlined below (as user root). \u003Cem>\u003Cu>DO NOT BLINDLY COPY & PASTE STUFF YOU FIND ON THE INTERNET WITHOUT A THOROUGH UNDERSTANDING WHAT YOU ARE DOING AS WELL AS REVIEWING ANY\u003Cstrong> \u003C\u002Fstrong>SCRIPTS PRIOR TO EXECUTING THEM ON ANY OF YOUR MACHINES!\u003C\u002Fu>\u003C\u002Fem>\u003C\u002Fp>\u003Cpre>\u003Ccode># cd \u002Ftmp\u002F\n# wget https:\u002F\u002Fraw.githubusercontent.com\u002Fspeed47\u002Fspectre-meltdown-checker\u002Fmaster\u002Fspectre-meltdown-checker.sh\n# sh spectre-meltdown-checker.sh --explain\u003C\u002Fcode>\u003C\u002Fpre>\u003Cfigure class=\"kg-card kg-image-card kg-width-full\">\u003Cimg src=\"\u002Fcontent\u002Fimages\u002F2018\u002F09\u002Fimage-6.png\" class=\"kg-image\" alt=\"\" loading=\"lazy\" width=\"1319\" height=\"182\" srcset=\"\u002Fcontent\u002Fimages\u002Fsize\u002Fw600\u002F2018\u002F09\u002Fimage-6.png 600w, \u002Fcontent\u002Fimages\u002Fsize\u002Fw1000\u002F2018\u002F09\u002Fimage-6.png 1000w, \u002Fcontent\u002Fimages\u002F2018\u002F09\u002Fimage-6.png 1319w\" \u002F>\u003C\u002Ffigure>\u003Cp>I've trimmed the output above using grep to only include information relevant to this article. I encourage you to read through every section to understand how vulnerabilities are being mitigated. The script will also make suggestions on how to enhance mitigations e.g. by enabling certain settings in your kernel build config.\u003C\u002Fp>\u003Cp>That's it. We will continue this once I've set up the cluster which will cover Proxmox VE  in a lot more detail including storage network design and capacity planning, among others.\u003C\u002Fp>\u003Cp>Cheers!\u003C\u002Fp>\u003Cdiv class=\"kg-card kg-callout-card kg-callout-card-green\">\u003Cdiv class=\"kg-callout-emoji\">💡\u003C\u002Fdiv>\u003Cdiv class=\"kg-callout-text\">Need some help with this topic? You can book a consultation with me to get expert advice! Click \u003Ca href=\"https:\u002F\u002Fcal.com\u002Fjdbungart?ref=ghost.jdneer.com\" rel=\"noreferrer\">this link\u003C\u002Fa> to get started.\u003C\u002Fdiv>\u003C\u002Fdiv>","Proxmox VE is a web based, open source hardware virtualization platform based on Debian GNU\u002FLinux. It allows for virtualizing unmodified guests using the...",{"src":60,"height":70,"width":71,"type":72},1620,3378,"image\u002Fjpeg","2025-01-08T15:31:04.000+08:00",{"name":75,"url":10,"owner":5},"JD Bungart",[77,89,97,105],{"slug":78,"title":79,"excerpt":80,"image":81,"publishedAt":82,"topics":83,"readMinutes":88},"package-cooldowns-github-package-firewall-npm-pnpm-bun-pip-uv-poetry","Package Cooldowns Compared: GitHub Package Firewall vs. What npm, pnpm, Yarn, Bun, pip, uv and Poetry Already Do","GitHub now offers an install-time firewall for npm, free in preview and metered later. Most package managers already ship a free cooldown. Here is what each tool does, the copy-paste config, and where cooldowns stop helping.","\u002Fcontent\u002Fimages\u002F2026\u002F10\u002Fpkg-cooldowns-conveyor-alberto-rodriguez-unsplash.jpg","2026-10-26T14:00:00.000+08:00",[84,85],{"key":64,"label":65},{"key":86,"label":87},"security","Security",1,{"slug":90,"title":91,"excerpt":92,"image":93,"publishedAt":94,"topics":95,"readMinutes":88},"hetzner-cloud-private-network-behind-your-own-firewall","Building a Private Network on Hetzner Cloud Behind Your Own Firewall","Keep servers off the public internet: a Hetzner Cloud private network with one route, your own firewall as the gateway, and working configs for Ubuntu and Rocky Linux 8.","\u002Fcontent\u002Fimages\u002F2026\u002F10\u002Fhetzner-private-network-feature-a1.png","2026-10-22T20:00:00.000+08:00",[96],{"key":64,"label":65},{"slug":98,"title":99,"excerpt":100,"image":101,"publishedAt":102,"topics":103,"readMinutes":88},"guide-to-setting-up-an-ookla-speedtest-server-on-rockylinux-8","Guide to Setting Up an OOKLA Speedtest Server on RockyLinux 8\u002F9","I'm gonna walk you through a simple guide to get your OOKLA Speedtest server(s) up and running on RockyLinux 8. We'll even make it start automatically when your server boots. Oh, and we'll sprinkle in some basic security tips to keep things safe.","https:\u002F\u002Fimages.unsplash.com\u002Fphoto-1610034534785-4706b86dd6a5?crop=entropy&cs=tinysrgb&fit=max&fm=jpg&ixid=M3wxMTc3M3wwfDF8c2VhcmNofDN8fHNwZWVkdGVzdHxlbnwwfHx8fDE2OTM3NTMxNjR8MA&ixlib=rb-4.0.3&q=80&w=2000","2025-01-10T14:10:00.000+08:00",[104],{"key":64,"label":65},{"slug":106,"title":107,"excerpt":108,"image":109,"publishedAt":110,"topics":111,"readMinutes":88},"stretch-ixgbe-driver-allow-unsupported-sfp-modules-on-intel-x520-cards","Debian: IXGBE Driver - Allow unsupported SFP+ Modules on Intel X520 Cards","The Server hardware we use for Proxmox deployments often has Intel X520 (ixgbe driver) or X710 (i40e driver) cards installed. These provide for several SFP+ ports required for 10 Gigabit connectivity. Enterprise vendors such as DELL and Intel provide compatibility lists for SFP transceivers that are supported by their network adapters. Often times adapter firmware requires specifically encoded modules, preventing any unsupported modules from being initialized. One way to work around this probl","\u002Fcontent\u002Fimages\u002F2019\u002F09\u002FIMG_20190926_171628.resized-2.jpg","2019-09-27T17:50:00.000+08:00",[112],{"key":64,"label":65},{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":114},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M5 12h14M5 12l6 6m-6-6l6-6\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":116},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M6.5 7.5a1 1 0 1 0 2 0a1 1 0 1 0-2 0\"\u002F>\u003Cpath d=\"M3 6v5.172a2 2 0 0 0 .586 1.414l7.71 7.71a2.41 2.41 0 0 0 3.408 0l5.592-5.592a2.41 2.41 0 0 0 0-3.408l-7.71-7.71A2 2 0 0 0 11.172 3H6a3 3 0 0 0-3 3\"\u002F>\u003C\u002Fg>"]