Skip to content

Proxmox VE Basic Configure

1. Basic config

1.1 Partition integrate

If PVE/data partitions are automatically created during installation, it is recommended to merge them to simplify storage management.

  • Login PVE server with ssh, and delete pve/data logical volume, and extended pve/root
lvremove /dev/pve/data
lvextend -l +100%FREE /dev/pve/root
resize2fs /dev/pve/root
lsblk

image-20250928005256550

  • Check pve/data mount point, and delete it (if exsit)
cat /etc/fstab

image-20250928005403243

1.2 Remove local-lvm

Login PVE web ui (https://PVE-IP:8006)

image-20250713120125907

Click Datacenter -> Storage -> local-lvm -> Remove

image-20250928005516567

1.3 Modify local storage

Click storage local -> Edit , add Disk image to local storage.

after modifying this parameter, you will be able to store virtual machines on local storage

image-20250928005723395

2. Network config

2.1 Create NIC bridge

  • Click Network -> Create -> Linux Bridge

image-20250928010544083

  • Input bridge Name -> VLAN aware -> Bridge ports -> Advanced -> VLAN IDs, and click Create

image-20250928010752568

2.3 Bind VLAN tags

  • Click Create -> Linux VLAN

we need to first open the trunk for the network port and obtain the VLAN ID

image-20250928010917165

  • Input vlan Name, and confirm VLAN Tag, then click Create

VLAN Tag = VLAN ID(switch config)

image-20250928011145478

2.4 Create sub-bridge

  • Click Create -> Linux Bridge

image-20250928011412422

  • Input sub bridge Name -> Bridge ports -> Comment

Please input Bridge ports with step 2.3 VLAN name

image-20250928011518667

  • Confirm bridge and vlan config, and click Apply Configuration

image-20250928011937088

3. APT config(optional)

3.1 Import certificate

  • Upload wistron CA certificate to PVE server
ls -l /tmp/

image-20250928012144547

  • Import certificate to system
cp /tmp/cacerts.crt /usr/local/share/ca-certificates/wistron-ca.crt
update-ca-certificates

image-20250928012348986

  • Change pve repository

Change repository file name

cd /etc/apt/sources.list.d/
mv pve-enterprise.sources pve-no-subscription.sources

Replace URIs to local ATP repository, and Components name

sed -i 's|https://enterprise.proxmox.com|https://wzs-yum.wistron.com/proxmox|g' pve-no-subscription.sources
sed -i 's|pve-enterprise|pve-no-subscription|g' pve-no-subscription.sources

image-20250928013208032

  • Change debian repository

Replace URIs to local APT repository

sed -i 's|http://deb.debian.org|https://wzs-yum.wistron.com|g' debian.sources
sed -i 's|http://security.debian.org|https://wzs-yum.wistron.com|g' debian.sources

image-20250928013841460

  • Change ceph repository

Replace URIs to local APT repository, and Components name

sed -i 's|https://enterprise.proxmox.com|https://wzs-yum.wistron.com/proxmox|g' ceph.sources
sed -i 's|enterprise|no-subscription|g' ceph.sources

image-20250928014557450

3.2 APT update

If use Internet source list, please confirm your server can access Internet

cd && apt update && apt upgrade -y

image-20250828173026854

4. Cluster config

4.1 Create cluster

  • Click Datacenter -> Cluster -> Create Cluster

image-20250928015203529

  • Input Cluster name, and select Cluster Network, then click Create

image-20250928015333737

4.2 Join cluster

  • Click Join Information

image-20250928015730570

  • Click Copy Information to copy join cluster info

image-20250928015839462

  • Login need join cluster node, and click Join Cluster

image-20250928020106342

  • Paste encoded cluster information, and input node1 login password

image-20250928020416402

  • Login cluster node and confirm cluster node status

image-20250928020915123

🎉Optional: Create cluster with command

# excute create cluster command on primary node
pvecm create wzs-ceph-q

# add other nodes (excute add cluster command on other nodes)
pvecm add 10.xx.xx.xx   (replace primary node ip)

# check cluster status
pvecm status

5. LDAPs config

5.1 Add realms

  • Click Datacenter -> Realms -> Add -> LDAP Server

image-20250928021120122

  • Input LDAPS general info
Realm: wzs.wistron  (Define your site domain name)
Base Domain Name: OU=WZS,DC=wzs,DC=wistron
User Attribute: sAMAccountName
Server: 10.41.20.10 (Your site dns IP)
Fallback Server: 10.41.20.20 (Second site dns IP, if have)
Mode: LDAPS
Comment: WZSCN  (Define your login PVE display domain name)

image-20251025082300825

  • Switch to enter LDAPS Sync Options info, then click Add
Bind User: wzsse@wzs.wistron    (Account with traversal domain account permissions)
Bind Password: id password
Group Filter: |(CN=MZL3*)(CN=MG31*) (Define only department accounts that require PVE for synchronization)

image-20251025082852452

5.2 Sync AD account

  • Click Realms -> wzs.wistron -> Sync

image-20250828174812515

  • Select sync Scope, and click Sync

image-20240801105349719

  • Sync status check

image-20250715201723083

  • PVE user check

image-20250828175331082

  • PVE group check

image-20250828175406110

  • Create account sync job

click Realms -> Add

image-20250122153957938

  • Select the Realms that need to be synchronized and choose the preset schedule as needed

image-20250122154147357

  • Click Create

image-20250122154335523

5.3 User config

  • Add user and role to PVE

Click Datacenter -> Permissions -> Add

image-20250828175856060

Assign access path

image-20250828175945611

Assign User and Role

image-20250828180137514