remove …/data, config/config.php and recreate the database before.
https://help.nextcloud.com/t/solved-how-to-reset-reinitialize-nextcloud-nc-17/63797
remove …/data, config/config.php and recreate the database before.
https://help.nextcloud.com/t/solved-how-to-reset-reinitialize-nextcloud-nc-17/63797
My reference:
https://www.samueldowling.com/2020/07/24/install-nextcloud-on-freenas-iocage-jail-with-hardened-security/
https://github.com/samuel-emrys-blogs/freebsd-nextcloud-setup-hardened
$ iocage create -n nextcloud -r 12.0-RELEASE ip4_addr="vnet0|192.168.0.54/24" defaultrouter="192.168.0.1" vnet="on" allow_raw_sockets="1" boot="on"
iocage start nextcloud$ iocage exec nextcloud mkdir -p /mnt/data
$ iocage exec nextcloud mkdir -p /var/db/mysql
$ iocage exec nextcloud mkdir -p /usr/local/www/nextcloud/config
$ iocage exec nextcloud mkdir -p /usr/local/www/nextcloud/themes
$ iocage fstab -a nextcloud /mnt/tank/cloud /mnt/data nullfs rw 0 0
$ iocage fstab -a nextcloud /mnt/tank/apps/nextcloud/db /var/db/mysql nullfs rw 0 0
$ iocage fstab -a nextcloud /mnt/tank/apps/nextcloud/config /usr/local/www/nextcloud/config nullfs rw 0 0
$ iocage fstab -a nextcloud /mnt/tank/apps/nextcloud/themes /usr/local/www/nextcloud/themes nullfs rw 0 0
zfs set primarycache=metadata tank/apps/nextcloud/dbiocage list
iocage console nextcloud
$ pkg update
$ pkg install nano
$ pkg install wget ca_root_nss
$ pkg install apache24
$ sysrc apache24_enable=yes
$ service apache24 start
$ pkg install mariadb104-server
$ sysrc mysql_enable=yes
in /usr/local/etc/mysql/my.cnf : socket = /tmp/mysql.sock
/usr/local/etc/rc.d/mysql-server start
mysql_secure_installation --socket=/tmp/mysql.sock
root@nextcloud:~ $ cd /tmp
root@nextcloud:/tmp $ wget https://download.nextcloud.com/server/releases/latest.tar.bz2
root@nextcloud:/tmp $ wget https://download.nextcloud.com/server/releases/latest.tar.bz2.sha512
shasum -a 512 -c latest.tar.bz2.sha512
tar -xf latest.tar.bz2 -C /usr/local/www
chown -R www:www /usr/local/www/nextcloud
pkg install php74 php74-bz2 php74-ctype php74-curl php74-dom php74-exif php74-fileinfo php74-filter php74-gd php74-iconv php74-intl php74-json php74-ldap php74-mbstring php74-opcache php74-openssl php74-pdo php74-pdo_mysql php74-pecl-APCu php74-pecl-imagick php74-pecl-redis php74-posix php74-session php74-simplexml php74-xml php74-xmlreader php74-xmlwriter php74-xsl php74-zip php74-zlib php74-bcmath php74-gmp
WARNING: FreeBSD 12.0-RELEASE HAS PASSED ITS END-OF-LIFE DATE.
Any security issues discovered after Sat Feb 29 08:00:00 +08 2020
will not have been corrected.
Installing updates... done.
Missing default rc.conf, creating it
nextcloud successfully created!
No default gateway found for ipv6.
* Starting nextcloud
+ Started OK
+ Using devfs_ruleset: 1000 (iocage generated default)
+ Configuring VNET OK
+ Using IP options: vnet
+ Starting services OK
+ Executing poststart OK
Thanks to Craft Computing :-)
root@mars:~# apt-get install lshw
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following NEW packages will be installed:
lshw
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 254 kB of archives.
After this operation, 781 kB of additional disk space will be used.
Get:1 http://ftp.debian.org/debian buster/main amd64 lshw amd64 02.18.85-0.1 [254 kB]
Fetched 254 kB in 10s (25.2 kB/s)
Selecting previously unselected package lshw.
(Reading database ... 51024 files and directories currently installed.)
Preparing to unpack .../lshw_02.18.85-0.1_amd64.deb ...
Unpacking lshw (02.18.85-0.1) ...
Setting up lshw (02.18.85-0.1) ...
Processing triggers for man-db (2.8.5-2) ...
Reference: Pci passthrough - Proxmox VE
vi /etc/default/grub
amend: GRUB_CMDLINE_LINUX_DEFAULT="quiet intel_iommu=on"
update-grub
root@mars:~# dmesg | grep -e DMAR -e IOMMU
[ 0.024470] ACPI: DMAR 0x000000007D3346F4 0000F0 (v01 DELL PE_SC3 00000001 DELL 00000001)
[ 1.207702] DMAR: Host address width 46
[ 1.207703] DMAR: DRHD base: 0x000000dc900000 flags: 0x1
[ 1.207707] DMAR: dmar0: reg_base_addr dc900000 ver 1:0 cap d2078c106f0462 ecap f020fe
[ 1.207708] DMAR: RMRR base: 0x0000007f458000 end: 0x0000007f46ffff
[ 1.207709] DMAR: RMRR base: 0x0000007f450000 end: 0x0000007f450fff
[ 1.207710] DMAR: RMRR base: 0x0000007f452000 end: 0x0000007f452fff
[ 1.207710] DMAR: ATSR flags: 0x0
[ 1.207712] DMAR-IR: IOAPIC id 0 under DRHD base 0xdc900000 IOMMU 0
[ 1.207713] DMAR-IR: IOAPIC id 1 under DRHD base 0xdc900000 IOMMU 0
[ 1.207714] DMAR-IR: HPET id 0 under DRHD base 0xdc900000
[ 1.207714] DMAR-IR: x2apic is disabled because BIOS sets x2apic opt out bit.
[ 1.207715] DMAR-IR: Use 'intremap=no_x2apic_optout' to override the BIOS setting.
[ 1.208001] DMAR-IR: Enabled IRQ remapping in xapic mode
root@mars:~# vi /etc/kernel/cmdline
root@mars:~# vi /etc/default/grub
root@mars:~# update-grub
Generating grub configuration file ...
Found linux image: /boot/vmlinuz-5.4.78-2-pve
Found initrd image: /boot/initrd.img-5.4.78-2-pve
Found linux image: /boot/vmlinuz-5.4.34-1-pve
Found initrd image: /boot/initrd.img-5.4.34-1-pve
Found memtest86+ image: /boot/memtest86+.bin
Found memtest86+ multiboot image: /boot/memtest86+_multiboot.bin
done
root@mars:~# pve-efiboot-tool refresh
Running hook script 'pve-auto-removal'..
Running hook script 'zz-pve-efiboot'..
Re-executing '/etc/kernel/postinst.d/zz-pve-efiboot' in new private mount namespace..
No /etc/kernel/pve-efiboot-uuids found, skipping ESP sync.
After that reboot, ran into problems... see this:
IOMMU – DMAR fault – PTE Read access is not set – Centoros (wordpress.com)
Here's a good short intro on ZFS:
https://www.diskinternals.com/raid-recovery/what-is-raidz/
And a more detailed one:
https://www.delphix.com/blog/delphix-engineering/zfs-raidz-stripe-width-or-how-i-learned-stop-worrying-and-love-raidz
I am going with RAID Z2 which basically allows up to 2 drives to fail in my setup for my R720 with 7x 600GB drives.
On my R720, I have an embedded PERC H310 Mini. I didn't realise it supports pass through if you configure the disks as non-raid.. this is cool.. i actually didn't need to get those other HBA cards. :-(
But anyway, I will need them for my R710 in future.
Some controllers can turn this on/off but the 310 does not. Check this: https://www.mrvsan.com/configuring-the-dell-perc-h730-controller-for-passthrough-and-raid/
Running minecraft bedrock on my R720:
download from here:
https://www.minecraft.net/en-us/download/server/bedrock
https://minecraft.azureedge.net/bin-linux/bedrock-server-1.16.200.02.zip
to turn on cheats: https://shockbyte.com/billing/knowledgebase/184/How-to-Enable-Cheats-on-Your-Bedrock-Server.html
to turn on coordinates: https://shockbyte.com/billing/knowledgebase/201/How-to-Enable-Coordinates-on-Your-Minecraft-Bedrock-Server.html#:~:text=On%20your%20Multicraft%20control%20panel,in%2Dgame%20as%20shown%20below.
root@venus:/dev# sg_map
/dev/sg0 /dev/sr0
/dev/sg1 /dev/sda
/dev/sg2 /dev/sdb
/dev/sg3 /dev/sdc
/dev/sg4 /dev/sdd
/dev/sg5 /dev/sde
/dev/sg6 /dev/sdf
/dev/sg7 /dev/sdg
/dev/sg8 /dev/sdh
/dev/sg9 /dev/sdi
/dev/sg10 /dev/sdj
/dev/sg11 /dev/sdk
/dev/sg12 /dev/sdl
/dev/sg13 /dev/sdm
/dev/sg14 /dev/sdn
/dev/sg15 /dev/sdo
/dev/sg16 /dev/sdp
/dev/sg17 /dev/sdq
/dev/sg18 /dev/sdr
/dev/sg19 /dev/sds
/dev/sg20 /dev/sdt
/dev/sg21 /dev/sdu
/dev/sg22 /dev/sdv
/dev/sg23 /dev/sdw
/dev/sg24 /dev/sdx
/dev/sg25 /dev/sdy
/dev/sg26 /dev/sdz
/dev/sg27 /dev/sdaa
/dev/sg28 /dev/sdab
/dev/sg29
root@venus:~# pvesm status
zfs error: cannot open 'VMs': no such pool
zfs error: cannot open 'VMs': no such pool
could not activate storage 'VMs', zfs error: cannot open 'VMs': no such pool
Name Type Status Total Used Available %
VMs zfspool inactive 0 0 0 0.00%
local dir active 34571888 2656612 30129420 7.68%
local-lvm lvmthin active 79556608 0 79556608 0.00%
root@venus:~# pvesm remove VMs
root@venus:~# pvesm status
Name Type Status Total Used Available %
local dir active 34571888 2656624 30129408 7.68%
local-lvm lvmthin active 79556608 0 79556608 0.00%
If your device is shown as Device Mapper, you can't create a new filesystem.
Try these commands:
root@venus:/# sgdisk --zap-all /dev/sdc
Creating new GPT entries.
GPT data structures destroyed! You may now partition the disk using fdisk or
other utilities.
See this thread:
ProxMox - Clearing disks for use | ServeTheHome Forums
root@pve:~# zpool destroy Local-Proxmox
root@pve:~# zpool list
no pools available
root@pve:~# dd if=/dev/zero of=/dev/sdb bs=4096 count=35
35+0 records in
35+0 records out
143360 bytes (143 kB, 140 KiB) copied, 0.000806736 s, 178 MB/s
root@pve:~# dd if=/dev/zero of=/dev/sdb bs=4096 count=35 seek=$(($(blockdev --getsz /dev/sdb)*512/4096 - 35))
35+0 records in
35+0 records out
143360 bytes (143 kB, 140 KiB) copied, 0.00118329 s, 121 MB/s
Refer to: https://www.reddit.com/r/homelab/comments/b20p7o/super_easy_way_to_make_an_r710_really_quiet
[root@database client]# yum install ipmitool
Loaded plugins: langpacks, product-id, search-disabled-repos, subscription-manager
Resolving Dependencies
--> Running transaction check
---> Package ipmitool.x86_64 0:1.8.18-9.el7_7 will be installed
--> Processing Dependency: OpenIPMI-modalias for package: ipmitool-1.8.18-9.el7_7.x86_64
--> Running transaction check
---> Package OpenIPMI-modalias.x86_64 0:2.0.27-1.el7 will be installed
--> Processing Dependency: OpenIPMI for package: OpenIPMI-modalias-2.0.27-1.el7.x86_64
--> Running transaction check
---> Package OpenIPMI.x86_64 0:2.0.27-1.el7 will be installed
--> Processing Dependency: OpenIPMI-libs = 2.0.27-1.el7 for package: OpenIPMI-2.0.27-1.el7.x86_64
--> Processing Dependency: libOpenIPMI.so.0()(64bit) for package: OpenIPMI-2.0.27-1.el7.x86_64
--> Processing Dependency: libOpenIPMIcmdlang.so.0()(64bit) for package: OpenIPMI-2.0.27-1.el7.x86_64
--> Processing Dependency: libOpenIPMIglib.so.0()(64bit) for package: OpenIPMI-2.0.27-1.el7.x86_64
--> Processing Dependency: libOpenIPMIposix.so.0()(64bit) for package: OpenIPMI-2.0.27-1.el7.x86_64
--> Processing Dependency: libOpenIPMIui.so.1()(64bit) for package: OpenIPMI-2.0.27-1.el7.x86_64
--> Processing Dependency: libOpenIPMIutils.so.0()(64bit) for package: OpenIPMI-2.0.27-1.el7.x86_64
--> Running transaction check
---> Package OpenIPMI-libs.x86_64 0:2.0.27-1.el7 will be installed
--> Finished Dependency Resolution
Dependencies Resolved
==============================================================================================================================================================================================
Package Arch Version Repository Size
==============================================================================================================================================================================================
Installing:
ipmitool x86_64 1.8.18-9.el7_7 rhel-7-server-rpms 442 k
Installing for dependencies:
OpenIPMI x86_64 2.0.27-1.el7 rhel-7-server-rpms 243 k
OpenIPMI-libs x86_64 2.0.27-1.el7 rhel-7-server-rpms 523 k
OpenIPMI-modalias x86_64 2.0.27-1.el7 rhel-7-server-rpms 16 k
Transaction Summary
==============================================================================================================================================================================================
Install 1 Package (+3 Dependent packages)
Total download size: 1.2 M
Installed size: 3.8 M
Is this ok [y/d/N]: y
Downloading packages:
(1/4): OpenIPMI-2.0.27-1.el7.x86_64.rpm | 243 kB 00:00:00
(2/4): OpenIPMI-libs-2.0.27-1.el7.x86_64.rpm | 523 kB 00:00:00
(3/4): OpenIPMI-modalias-2.0.27-1.el7.x86_64.rpm | 16 kB 00:00:00
(4/4): ipmitool-1.8.18-9.el7_7.x86_64.rpm | 442 kB 00:00:00
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total 1.5 MB/s | 1.2 MB 00:00:00
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Installing : OpenIPMI-modalias-2.0.27-1.el7.x86_64 1/4
Installing : OpenIPMI-libs-2.0.27-1.el7.x86_64 2/4
Installing : OpenIPMI-2.0.27-1.el7.x86_64 3/4
Installing : ipmitool-1.8.18-9.el7_7.x86_64 4/4
WARNING: ipmi_devintf module isn't available.
WARNING: ipmi_msghandler module isn't available.
Verifying : OpenIPMI-libs-2.0.27-1.el7.x86_64 1/4
Verifying : ipmitool-1.8.18-9.el7_7.x86_64 2/4
Verifying : OpenIPMI-2.0.27-1.el7.x86_64 3/4
Verifying : OpenIPMI-modalias-2.0.27-1.el7.x86_64 4/4
Installed:
ipmitool.x86_64 0:1.8.18-9.el7_7
Dependency Installed:
OpenIPMI.x86_64 0:2.0.27-1.el7 OpenIPMI-libs.x86_64 0:2.0.27-1.el7 OpenIPMI-modalias.x86_64 0:2.0.27-1.el7
Complete!
[root@database client]# ipmitool
Could not open device at /dev/ipmi0 or /dev/ipmi/0 or /dev/ipmidev/0: No such file or directory
[root@database client]# ipmitool -H 192.168.1.8 -I lanplus -U root -P P@ssw0rd mc info
Device ID : 32
Device Revision : 0
Firmware Revision : 2.85
IPMI Version : 2.0
Manufacturer ID : 674
Manufacturer Name : DELL Inc
Product ID : 256 (0x0100)
Product Name : Unknown (0x100)
Device Available : yes
Provides Device SDRs : yes
Additional Device Support :
Sensor Device
SDR Repository Device
SEL Device
FRU Inventory Device
IPMB Event Receiver
Bridge
Chassis Device
Aux Firmware Rev Info :
0x00
0x04
0x00
0x00
Learnt a new term .. :-)
https://gist.github.com/whiskerz007/53c6aa5d624154bacbbc54880e1e3b2a
root@pve:~# sg_readcap /dev/sg2
Read Capacity results:
Last LBA=1125768575 (0x4319dd7f), Number of logical blocks=1125768576
Logical block length=520 bytes
Hence:
Device size: 585399659520 bytes, 558280.6 MiB, 585.40 GB
Good summary of sg3_utils:
http://www.ndwiki.org/wiki/User:Tingo/sg3_utils
root@pve:~# apt-get update
Get:1 http://security.debian.org buster/updates InRelease [65.4 kB]
Get:2 http://security.debian.org buster/updates/main amd64 Packages [243 kB]
Get:3 http://security.debian.org buster/updates/main Translation-en [133 kB]
Get:4 http://ftp.debian.org/debian buster InRelease [121 kB]
Get:5 http://ftp.debian.org/debian buster-updates InRelease [51.9 kB]
Get:6 http://ftp.debian.org/debian buster/main amd64 Packages [7,906 kB]
Get:7 http://ftp.debian.org/debian buster/main Translation-en [5,968 kB]
Get:8 http://ftp.debian.org/debian buster/contrib amd64 Packages [50.5 kB]
Get:9 http://ftp.debian.org/debian buster/contrib Translation-en [44.5 kB]
Get:10 http://ftp.debian.org/debian buster-updates/main amd64 Packages [7,856 B]
Get:11 http://ftp.debian.org/debian buster-updates/main Translation-en [5,672 B]
Err:12 https://enterprise.proxmox.com/debian/pve buster InRelease
401 Unauthorized [IP: 51.79.159.216 443]
Reading package lists... Done
E: Failed to fetch https://enterprise.proxmox.com/debian/pve/dists/buster/InRelease 401 Unauthorized [IP: 51.79.159.216 443]
E: The repository 'https://enterprise.proxmox.com/debian/pve buster InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
root@pve:~# sg_scan -i
/dev/sg0: scsi0 channel=0 id=0 lun=0 [em]
TSSTcorp DVD+-RW TS-L633C D250 [rmb=1 cmdq=0 pqual=0 pdev=0x5]
/dev/sg1: scsi2 channel=2 id=0 lun=0
DELL PERC H700 2.10 [rmb=0 cmdq=1 pqual=0 pdev=0x0]
/dev/sg2: scsi3 channel=0 id=0 lun=0
HITACHI HUC10606 CLAR600 C260 [rmb=0 cmdq=1 pqual=0 pdev=0x0]
/dev/sg3: scsi3 channel=0 id=1 lun=0
HITACHI HUC10606 CLAR600 C260 [rmb=0 cmdq=1 pqual=0 pdev=0x0]
/dev/sg4: scsi3 channel=0 id=2 lun=0
HITACHI HUC10606 CLAR600 C260 [rmb=0 cmdq=1 pqual=0 pdev=0x0]
/dev/sg5: scsi3 channel=0 id=3 lun=0
HITACHI HUC10606 CLAR600 C260 [rmb=0 cmdq=1 pqual=0 pdev=0x0]
/dev/sg6: scsi3 channel=0 id=4 lun=0
HITACHI HUC10606 CLAR600 C330 [rmb=0 cmdq=1 pqual=0 pdev=0x0]
/dev/sg7: scsi3 channel=0 id=5 lun=0
EMC ESES Enclosure 0001 [rmb=0 cmdq=1 pqual=0 pdev=0xd]
root@pve:~# apt-get install sg3-utils
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
libsgutils2-2
The following NEW packages will be installed:
libsgutils2-2 sg3-utils
0 upgraded, 2 newly installed, 0 to remove and 44 not upgraded.
Need to get 949 kB of archives.
After this operation, 2,951 kB of additional disk space will be used.
Do you want to continue? [Y/n] Y
Get:1 http://ftp.debian.org/debian buster/main amd64 libsgutils2-2 amd64 1.44-1 [112 kB]
Get:2 http://ftp.debian.org/debian buster/main amd64 sg3-utils amd64 1.44-1 [837 kB]
Fetched 949 kB in 2s (536 kB/s)
Selecting previously unselected package libsgutils2-2.
(Reading database ... 44066 files and directories currently installed.)
Preparing to unpack .../libsgutils2-2_1.44-1_amd64.deb ...
Unpacking libsgutils2-2 (1.44-1) ...
Selecting previously unselected package sg3-utils.
Preparing to unpack .../sg3-utils_1.44-1_amd64.deb ...
Unpacking sg3-utils (1.44-1) ...
Setting up libsgutils2-2 (1.44-1) ...
Setting up sg3-utils (1.44-1) ...
Processing triggers for man-db (2.8.5-2) ...
Processing triggers for libc-bin (2.28-10) ...
I am using this as a guide:
https://www.altaro.com/vmware/reset-esxi-root-password/
https://www.vmwareblog.org/forgot-esxi-root-password-no-problems-4-ways-reset/
Mine should be /dev/sdb5
After untar:
BTW, need to this for both sdb5 and sdb6 (easier to just copy across coz I tried to do 2x and ended up with some MD5 error).
On one of the R710 I have, I found out that I have a Perc 5/E card.
But it uses SFF-8470 connector. The VNX uses SFF-8088.
More details: https://en.wikipedia.org/wiki/Serial_Attached_SCSI
So here is what I bought:
To run the VNX disks as JBOD, I will need to get a HBA or raid card that runs in IT mode.
I've ordered 2 cards:
H200E
LSI-92800-e
The H200E is actually a DELL branded of the LSI card.
https://www.reddit.com/r/homelab/comments/662zrj/how_to_use_an_emc_dae_from_an_ax45i_as_das/
https://www.storagefreak.net/2014/05/emc-vnx-different-types-of-disk-shelves
Here's a good link on this:
https://forum.level1techs.com/t/how-to-reformat-520-byte-drives-to-512-bytes-usually/133021
https://mikeyurick.com/reformat-emc-hard-drives-to-use-in-other-systems-520-to-512-block-size-conversion-solved/
https://wp.colliertech.org/cj/?p=1802
But the problem is that the drives are connected via my Perc H800 controller but it is not passing the drive to the OS (Debian by Promox).
Wanna buy cheap DC drives:
https://www.servethehome.com/buyers-guide-datacenter-ssd-inexpensively/
Hmmm.. still scratching my head.. some tips here:
https://serverfault.com/questions/895706/connecting-emc-vnx-6g-dae-to-server-using-sas
https://www.jpaul.me/2012/11/anatomy-of-an-emc-vnx-array/comment-page-2/
Seems like mine is VNX 5200 DAE
Here is how I did it:
1. Create a boot disk using Hiren’s BootCD PE
https://www.hirensbootcd.org/download/
2. Boot using this USB disk and open a command prompt and execute the following steps:
c:
cd windows\system32
ren Utilman.exe Utilman.exe.old
copy cmd.exe Utilman.exe
net user administrator Password12
This will set the password for the Administrator user to be Password12 (case sensitive).
When I boot up my R710 after swapping the motherboard, I found out that it is not the Dell BIOS!
After flashing with the latest BIOS update, no version exists.. and I can't apply other updates.
To resolve, this, I have force the BIOS update again.
Here is what I did :
1. Use Rufus to create a PC-DOS USB boot disk
2. Ensure BIOS boot mode is BIOS (not EFI)
3. Boot from the USB
4. Run the BIOS update (R710-060600C.exe) with /FORCETYPE option... now it is back to normal!
edit "/etc/vmware/rhttpproxy/config.xml" (<httpsPort>443</httpsPort> to <httpsPort>4444</httpsPort>)
run command "/etc/init.d/rhttpproxy restart"
create new file "/etc/vmware/firewall/changes.xml"
copy this text to file:
<ConfigRoot> <service> <id>changedport</id> <rule id='0000'> <direction>inbound</direction> <protocol>tcp</protocol> <porttype>dst</porttype> <port>4444</port> </rule> <enabled>true</enabled> <required>false</required> </service> </ConfigRoot>
run command "/sbin/esxcli network firewall refresh"
copy above file into /vmfs/volumes/xxxxxxx-80925220-52bf-b8ac6f41950b/changes.xml
add below code to "/etc/rc.local.d/local.sh" for work after reboot:
/sbin/cp /vmfs/volumes/xxxxxxx-80925220-52bf-b8ac6f41950b/changes.xml/ etc/vmware/firewall/ /sbin/esxcli network firewall refresh exit 0
done.
https://stackoverflow.com/questions/53400427/how-can-i-change-default-port-80-and-443-in-esxi-host-6-7
1. enable ssh on esxi host
2. connect via ssh or press alt + f1 on esxi host
3. edit this file by command vi /etc/vmware/rhttpproxy/config.xml
4. find text https by command :/https
<!-- HTTPS port to be used by the reverse proxy -->
<httpsPort>443</httpsPort>
5. change port to eg. 9443
(press insert before editing and after finished press esc save it by :wq)
6. reboot needed by command reboot
7. after reboot connect to ssh and create new file changedport.xml by command
vi /etc/vmware/firewall/changedport.xml
8. copy this text to console.
<ConfigRoot>
<service>
<id>changedport</id>
<rule id='0000'>
<direction>inbound</direction>
<protocol>tcp</protocol>
<porttype>dst</porttype>
<port>9443</port>
</rule>
<enabled>true</enabled>
<required>false</required>
</service>
</ConfigRoot>
9. save it by :wq
10. refresh firewall rules by command esxcli network firewall refresh
do this first:
esxcli network firewall set -e false
ssh root@192.168.1.201
FIPS mode initialized
The authenticity of host '192.168.1.201 (192.168.1.201)' can't be established.
RSA key fingerprint is SHA256:Kv8k7Ctzj/SPC62Vq+GJwPQ4vlh/FSrXDijIA3+Pbj0.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.1.201' (RSA) to the list of known hosts.
With me doing alot of testing on OpenShift and Kurbenetes, my current Intel NUC10i7FNH is quickly running out juice.
https://www.starwindsoftware.com/blog/choosing-ideal-mini-server-for-a-home-lab
Been researching abit on Supermicro E200/E300 servers, here are some nice setups:
https://theithollow.com/2020/02/15/2020-home-lab/
https://www.virtualizationhowto.com/2020/06/supermicro-vmware-home-lab/
https://www.virtuallyghetto.com/2018/11/supermicro-e300-9d-sys-e300-9d-8cn8tp-is-a-nice-esxi-vsan-kit.html
https://edywerder.ch/vmware-esxi-barebone-homelab/
Considering either the E300 or E301:
https://www.supermicro.com/en/products/system/Mini-ITX/SYS-E300-9D-8CN8TP.cfm
https://www.supermicro.com/en/products/system/Mini-ITX/SYS-E301-9D-8CN8TP.cfm
Reviews:
https://www.servethehome.com/supermicro-as-e301-9d-8cn4-review-embedded-epyc-appliance/
Possible place to buy:
https://mitxpc.com/collections/networking
HCL (SYS-E300-9D-8CN8TP)
https://www.vmware.com/resources/compatibility/search.php?deviceCategory=server&details=1&partner=105&keyword=SYS-E300-9D-8CN8TP&systemTypes=2&page=1&display_interval=10&sortColumn=Partner&sortOrder=Asc
[root@ESXi01:~] esxcli network vswitch standard add -v vSwitch1 -P 3456
[root@ESXi01:~] esxcli network nic list
Name PCI Device Driver Admin Status Link Status Speed Duplex MAC Address MTU Description
------ ------------ ------ ------------ ----------- ----- ------ ----------------- ---- -----------
vmnic0 0000:00:1f.6 ne1000 Up Up 1000 Full 1c:69:7a:6b:a3:e5 1500 Intel Corporation Ethernet Connection (10) I219-V
vusb0 Pseudo uether Up Up 100 Full 00:e0:4c:36:00:d1 1500 Realtek USB 10100 LAN
vusb1 Pseudo uether Up Up 100 Full 00:e0:4c:36:01:44 1500 Realtek USB 10100 LAN
[root@ESXi01:~] esxcli network vswitch standard list
vSwitch0
Name: vSwitch0
Class: cswitch
Num Ports: 3456
Used Ports: 11
Configured Ports: 128
MTU: 1500
CDP Status: listen
Beacon Enabled: false
Beacon Interval: 1
Beacon Threshold: 3
Beacon Required By:
Uplinks: vmnic0
Portgroups: VM Network, Management Network
WAN
Name: WAN
Class: cswitch
Num Ports: 3456
Used Ports: 4
Configured Ports: 128
MTU: 1500
CDP Status: listen
Beacon Enabled: false
Beacon Interval: 1
Beacon Threshold: 3
Beacon Required By:
Uplinks: vusb0
Portgroups: WAN
vSwitch1
Name: vSwitch1
Class: cswitch
Num Ports: 3456
Used Ports: 1
Configured Ports: 3456
MTU: 1500
CDP Status: listen
Beacon Enabled: false
Beacon Interval: 1
Beacon Threshold: 3
Beacon Required By:
Uplinks:
Portgroups:
[root@ESXi01:~] esxcli network vswitch standard uplink add -u vusb1 -v vSwitch1
[root@ESXi01:~] esxcli network vswitch standard list
vSwitch0
Name: vSwitch0
Class: cswitch
Num Ports: 3456
Used Ports: 11
Configured Ports: 128
MTU: 1500
CDP Status: listen
Beacon Enabled: false
Beacon Interval: 1
Beacon Threshold: 3
Beacon Required By:
Uplinks: vmnic0
Portgroups: VM Network, Management Network
WAN
Name: WAN
Class: cswitch
Num Ports: 3456
Used Ports: 4
Configured Ports: 128
MTU: 1500
CDP Status: listen
Beacon Enabled: false
Beacon Interval: 1
Beacon Threshold: 3
Beacon Required By:
Uplinks: vusb0
Portgroups: WAN
vSwitch1
Name: vSwitch1
Class: cswitch
Num Ports: 3456
Used Ports: 3
Configured Ports: 3456
MTU: 1500
CDP Status: listen
Beacon Enabled: false
Beacon Interval: 1
Beacon Threshold: 3
Beacon Required By:
Uplinks: vusb1
Portgroups:
Add a new port group :
esxcli network vswitch standard portgroup add -p OKD -v vSwitch1