Install Proxmox VE with NAT on Hetzner: Difference between revisions

From Jwiki
← Older editNewer edit →
No edit summary
No edit summary
Line 1: Line 1:
== Prequisites ==
== Prequisites ==


 
# test
## Download PVE iso:
## Download PVE iso:
 
<syntaxhighlight lang="bash">
<pre>
curl http://download.proxmox.com/iso/proxmox-ve_8.2-1.iso -o /tmp/proxmox-ve.iso
curl http://download.proxmox.com/iso/proxmox-ve_8.2-1.iso -o /tmp/proxmox-ve.iso
</pre>
</syntaxhighlight>
 


## Might need to install qemu and ovmf:
## Might need to install qemu and ovmf:
 
<syntaxhighlight lang="bash">
<pre>
sudo apt-get install -y qemu ovmf
sudo apt-get install -y qemu ovmf
</pre>
</syntaxhighlight>
 


== Install ==
== Install ==
Line 24: Line 20:
## Set variables
## Set variables


<pre>
<syntaxhighlight lang="bash">
INTERFACE_NAME=$(udevadm info -q property /sys/class/net/eth0 | grep "ID_NET_NAME_PATH=" | cut -d'=' -f2)
INTERFACE_NAME=$(udevadm info -q property /sys/class/net/eth0 | grep "ID_NET_NAME_PATH=" | cut -d'=' -f2)
IP_CIDR=$(ip addr show eth0 | grep "inet\b" | awk '{print $2}')
IP_CIDR=$(ip addr show eth0 | grep "inet\b" | awk '{print $2}')
Line 35: Line 31:
SECONDARY_DISK=$(lsblk -dn -o NAME,SIZE,TYPE -e 1,7,11,14,15 | sed -n 1p | awk '{print $1}')
SECONDARY_DISK=$(lsblk -dn -o NAME,SIZE,TYPE -e 1,7,11,14,15 | sed -n 1p | awk '{print $1}')
THIRD_DISK=$(lsblk -dn -o NAME,SIZE,TYPE -e 1,7,11,14,15 | sed -n 2p | awk '{print $1}')
THIRD_DISK=$(lsblk -dn -o NAME,SIZE,TYPE -e 1,7,11,14,15 | sed -n 2p | awk '{print $1}')
</pre>
</syntaxhighlight>




## Start qemu with installer cd-rom:
## Start qemu with installer cd-rom:


<pre>
<syntaxhighlight lang="bash">
qemu-system-x86_64 -daemonize -enable-kvm -m 10240 -k en-us \
qemu-system-x86_64 -daemonize -enable-kvm -m 10240 -k en-us \
-drive file=/dev/$PRIMARY_DISK,format=raw,media=disk,if=virtio,id=$PRIMARY_DISK \
-drive file=/dev/$PRIMARY_DISK,format=raw,media=disk,if=virtio,id=$PRIMARY_DISK \
Line 51: Line 47:


echo "change vnc password pa$$w0rd6" | nc -q 1 127.0.0.1 4444
echo "change vnc password pa$$w0rd6" | nc -q 1 127.0.0.1 4444
</pre>
</syntaxhighlight>




Line 58: Line 54:
Set tunneling, then use VNC with the port 5900. At the end, uncheck the restart option, then stop the virtual machine:
Set tunneling, then use VNC with the port 5900. At the end, uncheck the restart option, then stop the virtual machine:


<pre>
<syntaxhighlight lang="bash">
printf "quit\n" | nc 127.0.0.1 4444
printf "quit\n" | nc 127.0.0.1 4444
</pre>
</syntaxhighlight>


## Start again without the installer:
## Start again without the installer:


<pre>
<syntaxhighlight lang="bash">
qemu-system-x86_64 -daemonize -enable-kvm -m 10240 -k en-us \
qemu-system-x86_64 -daemonize -enable-kvm -m 10240 -k en-us \
-drive file=/dev/$PRIMARY_DISK,format=raw,media=disk,if=virtio,id=$PRIMARY_DISK \
-drive file=/dev/$PRIMARY_DISK,format=raw,media=disk,if=virtio,id=$PRIMARY_DISK \
Line 75: Line 71:


echo "change vnc password pa$$w0rd6" | nc -q 1 127.0.0.1 4444
echo "change vnc password pa$$w0rd6" | nc -q 1 127.0.0.1 4444
</pre>
</syntaxhighlight>


## Create interfaces config for NAT, then copy it on the system:
## Create interfaces config for NAT, then copy it on the system:
Line 83: Line 79:
A few available options: openWRT, PfSense
A few available options: openWRT, PfSense


<pre>
<syntaxhighlight lang="bash">
cat > /tmp/proxmox_network_config << EOF
cat > /tmp/proxmox_network_config << EOF
auto lo
auto lo
Line 111: Line 107:
#WAN
#WAN
EOF
EOF
</pre>
</syntaxhighlight>


For the copy, use the password which you set for root
For the copy, use the password which you set for root


<pre>
<syntaxhighlight lang="bash">
scp -o StrictHostKeyChecking=no -P 2222 /tmp/proxmox_network_config root@localhost:/etc/network/interfaces
scp -o StrictHostKeyChecking=no -P 2222 /tmp/proxmox_network_config root@localhost:/etc/network/interfaces
</pre>
</syntaxhighlight>


Stop the virtual machine again:
Stop the virtual machine again:


<pre>
<syntaxhighlight lang="bash">
printf "quit\n" | nc 127.0.0.1 4444
printf "quit\n" | nc 127.0.0.1 4444
</pre>
</syntaxhighlight>


## Restart in normal mode
## Restart in normal mode
Line 135: Line 131:
## Enable IP forwarding:
## Enable IP forwarding:


<pre>
<syntaxhighlight lang="bash">
sed -i 's/#net.ipv4.ip_forward=1/net.ipv4.ip_forward=1/' /etc/sysctl.conf
sed -i 's/#net.ipv4.ip_forward=1/net.ipv4.ip_forward=1/' /etc/sysctl.conf
sed -i 's/#net.ipv6.conf.all.forwarding=1/net.ipv6.conf.all.forwarding=1/' /etc/sysctl.conf
sed -i 's/#net.ipv6.conf.all.forwarding=1/net.ipv6.conf.all.forwarding=1/' /etc/sysctl.conf
Line 143: Line 139:
sysctl net.ipv4.ip_forward
sysctl net.ipv4.ip_forward
sysctl net.ipv6.conf.all.forwarding
sysctl net.ipv6.conf.all.forwarding
</pre>
</syntaxhighlight>


## Check iptables:
## Check iptables:
Line 149: Line 145:
List configuration:
List configuration:


<pre>
<syntaxhighlight lang="bash">
iptables -t nat -L
iptables -t nat -L
</pre>
</syntaxhighlight>


## Edit iptables:
## Edit iptables:
Line 157: Line 153:
Modify configuration:
Modify configuration:


<pre>
<syntaxhighlight lang="bash">
vi /etc/network/interfaces
vi /etc/network/interfaces
</pre>
</syntaxhighlight>


Clear current configuration:
Clear current configuration:
<pre>
<syntaxhighlight lang="bash">
iptables -t nat -F
iptables -t nat -F
</pre>
</syntaxhighlight>


Apply configuration:
Apply configuration:
<pre>
<syntaxhighlight lang="bash">
ifreload -a
ifreload -a
</pre>
</syntaxhighlight>




Revision as of 18:34, 28 August 2024

Prequisites

  1. test
    1. Download PVE iso:
curl http://download.proxmox.com/iso/proxmox-ve_8.2-1.iso -o /tmp/proxmox-ve.iso
    1. Might need to install qemu and ovmf:
sudo apt-get install -y qemu ovmf

Install

    1. Start system in rescue mode


    1. Set variables
INTERFACE_NAME=$(udevadm info -q property /sys/class/net/eth0 | grep "ID_NET_NAME_PATH=" | cut -d'=' -f2)
IP_CIDR=$(ip addr show eth0 | grep "inet\b" | awk '{print $2}')
GATEWAY=$(ip route | grep default | awk '{print $3}')
IP_ADDRESS=$(echo "$IP_CIDR" | cut -d'/' -f1)
CIDR=$(echo "$IP_CIDR" | cut -d'/' -f2)

## Get the primary and secondary disks
PRIMARY_DISK=$(lsblk -dn -o NAME,SIZE,TYPE -e 1,7,11,14,15 | sed -n 3p | awk '{print $1}')
SECONDARY_DISK=$(lsblk -dn -o NAME,SIZE,TYPE -e 1,7,11,14,15 | sed -n 1p | awk '{print $1}')
THIRD_DISK=$(lsblk -dn -o NAME,SIZE,TYPE -e 1,7,11,14,15 | sed -n 2p | awk '{print $1}')


    1. Start qemu with installer cd-rom:
qemu-system-x86_64 -daemonize -enable-kvm -m 10240 -k en-us \
-drive file=/dev/$PRIMARY_DISK,format=raw,media=disk,if=virtio,id=$PRIMARY_DISK \
-drive file=/dev/$SECONDARY_DISK,format=raw,media=disk,if=virtio,id=$SECONDARY_DISK \
-drive file=/dev/$THIRD_DISK,format=raw,media=disk,if=virtio,id=$THIRD_DISK \
-drive file=/usr/share/OVMF/OVMF_CODE.fd,if=pflash,format=raw,readonly=on \
-drive file=/usr/share/OVMF/OVMF_VARS.fd,if=pflash,format=raw \
-cdrom /tmp/proxmox-ve.iso -boot d \
-vnc :0,password=on -monitor telnet:127.0.0.1:4444,server,nowait

echo "change vnc password pa$$w0rd6" | nc -q 1 127.0.0.1 4444


    1. Connect and install Proxmox:

Set tunneling, then use VNC with the port 5900. At the end, uncheck the restart option, then stop the virtual machine: 

printf "quit\n" | nc 127.0.0.1 4444
    1. Start again without the installer:
qemu-system-x86_64 -daemonize -enable-kvm -m 10240 -k en-us \
-drive file=/dev/$PRIMARY_DISK,format=raw,media=disk,if=virtio,id=$PRIMARY_DISK \
-drive file=/dev/$SECONDARY_DISK,format=raw,media=disk,if=virtio,id=$SECONDARY_DISK \
-drive file=/dev/$THIRD_DISK,format=raw,media=disk,if=virtio,id=$THIRD_DISK \
-drive file=/usr/share/OVMF/OVMF_CODE.fd,if=pflash,format=raw,readonly=on \
-drive file=/usr/share/OVMF/OVMF_VARS.fd,if=pflash,format=raw \
-vnc :0,password=on -monitor telnet:127.0.0.1:4444,server,nowait \
-net user,hostfwd=tcp::2222-:22 -net nic

echo "change vnc password pa$$w0rd6" | nc -q 1 127.0.0.1 4444
    1. Create interfaces config for NAT, then copy it on the system:

The first virtualmachine which will be created is a router, as that will handle the network traffic coming from WAN

A few available options: openWRT, PfSense 

cat > /tmp/proxmox_network_config << EOF
auto lo

iface lo inet loopback

iface $INTERFACE_NAME inet manual

auto vmbr0
iface vmbr0 inet static
  address $IP_ADDRESS/$CIDR
  gateway $GATEWAY
  bridge_ports $INTERFACE_NAME
  bridge_stp off
  bridge_fd 0
#Do not use

auto vmbr1
iface vmbr1 inet static
        address 172.16.16.1/24
        bridge-ports none
        bridge-stp off
        bridge-fd 0
        post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --destination $IP_ADDRESS -m multiport ! --dports 22,8006 -j DNAT --to 172.16.16.254
        post-up iptables -t nat -A PREROUTING -i vmbr0 -p udp --destination $IP_ADDRESS -j DNAT --to 172.16.16.254
        post-up iptables -t nat -A POSTROUTING -s '172.16.16.0/24' -o vmbr0 -j MASQUERADE
#WAN
EOF

For the copy, use the password which you set for root 

scp -o StrictHostKeyChecking=no -P 2222 /tmp/proxmox_network_config root@localhost:/etc/network/interfaces

Stop the virtual machine again: 

printf "quit\n" | nc 127.0.0.1 4444
    1. Restart in normal mode


Final steps

    1. Login to the system:
    1. Enable IP forwarding:
sed -i 's/#net.ipv4.ip_forward=1/net.ipv4.ip_forward=1/' /etc/sysctl.conf
sed -i 's/#net.ipv6.conf.all.forwarding=1/net.ipv6.conf.all.forwarding=1/' /etc/sysctl.conf

sysctl -p

sysctl net.ipv4.ip_forward
sysctl net.ipv6.conf.all.forwarding
    1. Check iptables:

List configuration: 

iptables -t nat -L
    1. Edit iptables:

Modify configuration: 

vi /etc/network/interfaces

Clear current configuration: 

iptables -t nat -F

Apply configuration: 

ifreload -a


Sources

Retrieved from "https://wiki.jandzsogyorgy.hu/index.php?title=Install_Proxmox_VE_with_NAT_on_Hetzner&oldid=36"