ফেজ ৬ — আসল প্রক্সমক্স VE (Proxmox VE — The Real Thing)#

hostnamectl set-hostname pve1.lab.local

# /etc/hosts-এ নিজের এন্ট্রি থাকতে হবে
echo "192.168.1.100 pve1.lab.local pve1" >> /etc/hosts

# enterprise রিপো বন্ধ, no-subscription চালু
echo "# deb https://enterprise.proxmox.com/debian/pve trixie pve-enterprise" \
  > /etc/apt/sources.list.d/pve-enterprise.list
echo "deb http://download.proxmox.com/debian/pve trixie pve-no-subscription" \
  > /etc/apt/sources.list.d/pve-install-repo.list

apt update && apt dist-upgrade -y && reboot

# ISO আপলোড
scp ubuntu-22.04.iso root@pve1:/var/lib/vz/template/iso/

qm create 100 \
  --name ubuntu-server \
  --memory 2048 \
  --cores 2 \
  --cpu host \
  --net0 virtio,bridge=vmbr0 \
  --virtio0 local-lvm:32 \
  --cdrom local:iso/ubuntu-22.04.iso \
  --boot order=ide2 \
  --ostype l26 \
  --agent enabled=1 \
  --onboot 1

qm start 100
qm terminal 100                # সিরিয়াল কনসোল (দ্রুত)
qm list
qm config 100
qm resize 100 virtio0 +10G     # ডিস্ক ১০ GB বাড়ানো
qm migrate 100 pve2 --online   # চালু অবস্থায় অন্য নোডে সরানো

pveam update
pveam available | grep debian
pveam download local debian-13-standard_13.0-1_amd64.tar.zst

pct create 200 local:vztmpl/debian-13-standard_13.0-1_amd64.tar.zst \
  --hostname nginx-web \
  --memory 512 --swap 512 \
  --rootfs local-lvm:8 \
  --net0 name=eth0,bridge=vmbr0,ip=192.168.1.200/24,gw=192.168.1.1 \
  --nameserver 1.1.1.1 \
  --unprivileged 1 \
  --features nesting=1

pct start 200
pct enter 200
pct exec 200 -- apt install nginx -y
pct snapshot 200 before-nginx
pct stop 200

vzdump 100 --storage local --compress zstd --mode snapshot
vzdump --all --storage pbs-storage --compress zstd --mode snapshot

# শিডিউল: Datacenter → Backup → Add

# রিস্টোর
qmrestore /var/lib/vz/dump/vzdump-qemu-100-2026_05_18-12_00_00.vma.zst 100 \
  --storage local-lvm

# রিস্টোর পরীক্ষা — নতুন VMID-তে ফিরিয়ে যাচাই করুন
qmrestore backup.vma.zst 999 --storage local-lvm --unique 1
qm start 999
qm destroy 999 --purge

ping 192.168.1.101
cat /etc/hosts        # সব নোডের এন্ট্রি থাকতে হবে
getent hosts pve2

# প্রথম নোডে
pvecm create mycluster

# বাকি প্রতিটি নোডে
pvecm add 192.168.1.100

pvecm status
pvecm nodes

ha-manager add vm:100 --state started --group ha-group1
ha-manager groupadd ha-group1 --nodes pve1,pve2 --restricted 0

ha-manager status
ha-manager config
pvecm status | grep quorum

sed -Ezi.bak "s/(Ext.Msg.show\(\{\s+title: gettext\('No valid sub)/void\(\{\1/g" \
  /usr/share/javascript/proxmox-widget-toolkit/proxmoxlib.js
systemctl restart pveproxy

pveum user add admin@pve --password 'StrongPass!'
pveum tfa add admin@pve --type totp
# QR কোড অথেন্টিকেটর অ্যাপে স্ক্যান করুন

apt install fail2ban

cat > /etc/fail2ban/jail.d/proxmox.conf << 'CONF'
[proxmox]
enabled  = true
port     = https,http,8006
filter   = proxmox
logpath  = /var/log/daemon.log
maxretry = 3
findtime = 3600
bantime  = 3600
CONF

cat > /etc/fail2ban/filter.d/proxmox.conf << 'CONF'
[Definition]
failregex = pvedaemon[.*authentication failure; rhost=<HOST>
CONF

systemctl restart fail2ban
fail2ban-client status proxmox

# /etc/default/grub
GRUB_CMDLINE_LINUX_DEFAULT="quiet intel_iommu=on iommu=pt mitigations=auto transparent_hugepage=never"
update-grub

apt install unattended-upgrades
dpkg-reconfigure --priority=low unattended-upgrades

echo "deb http://download.proxmox.com/debian/pbs trixie pbs-no-subscription" \
  > /etc/apt/sources.list.d/pbs-install-repo.list

wget https://enterprise.proxmox.com/debian/proxmox-release-trixie.gpg \
  -O /etc/apt/trusted.gpg.d/proxmox-release-trixie.gpg

apt update && apt install proxmox-backup-server
# ওয়েব UI: https://PBS-IP:8007

proxmox-backup-manager datastore create main /mnt/backup-disk

pvesm add pbs pbs-store \
  --server 192.168.1.200 \
  --datastore main \
  --username admin@pbs \
  --password 'PBSPass!'

proxmox-backup-manager prune-job create job1 \
  --store main \
  --keep-daily 7 --keep-weekly 4 --keep-monthly 6

proxmox-backup-client verify --repository admin@pbs!192.168.1.200:main backup/vm/100

proxmox-backup-client key create /etc/pve/priv/backup-encryption.key

apt install prometheus-node-exporter
systemctl enable --now prometheus-node-exporter    # পোর্ট 9100

curl http://localhost:9100/metrics | head -20

# VM/CT মেট্রিকের জন্য
apt install prometheus-pve-exporter 2>/dev/null || pip3 install prometheus-pve-exporter

apt install postfix libsasl2-modules
# /etc/postfix/main.cf
# relayhost = [smtp.gmail.com]:587
# smtp_sasl_auth_enable = yes
# smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
# smtp_tls_security_level = encrypt

postmap /etc/postfix/sasl_passwd
systemctl restart postfix
echo "Test from Proxmox" | mail -s "PVE Alert" admin@example.com

pvesh get /nodes
pvesh get /nodes/pve1/status
pvesh get /nodes/pve1/qemu

pvesh create /nodes/pve1/qemu \
  --vmid 200 --name api-test-vm \
  --memory 1024 --cores 2 \
  --net0 virtio,bridge=vmbr0 \
  --virtio0 local-lvm:20

pvesh create /nodes/pve1/qemu/200/status/start
pvesh get /nodes/pve1/qemu/200/config

TICKET=$(curl -sk -d "username=root@pam&password=YourPass" \
  https://192.168.1.100:8006/api2/json/access/ticket | \
  python3 -c "import sys,json; print(json.load(sys.stdin)['data']['ticket'])")

curl -sk -b "PVEAuthCookie=${TICKET}" \
  https://192.168.1.100:8006/api2/json/nodes/pve1/qemu | python3 -m json.tool

provider "proxmox" {
  endpoint  = "https://192.168.1.100:8006"
  api_token = "root@pam!terraform=your-token-uuid"
  insecure  = true
}

resource "proxmox_virtual_environment_vm" "web_server" {
  name      = "web-01"
  node_name = "pve1"
  vm_id     = 300

  cpu    { cores = 2 }
  memory { dedicated = 2048 }

  network_device { bridge = "vmbr0", model = "virtio" }

  disk {
    datastore_id = "local-lvm"
    size         = 32
    interface    = "virtio0"
  }
}