Proxmox Pulse
Storage, ZFS & Backup Strategies
OpenZFS CVE-2026-79619: Lock Down /dev/zfs on Proxmox
/dev/zfs ships world-writable, and until ZFS 2.4.4 a fake root inside unshare -Ur was enough to run zpool destroy.
8 min read
Tag
#security
12 articles tagged security.
Storage, ZFS & Backup Strategies
Upgrade Ceph Reef to Tentacle 20.2.4 for Security
Your Ceph Reef cluster is insecure — upgrade to Tentacle 20.2.4 today to patch critical CVEs and avoid data loss.
47 min read
Networking, VLANs & Security Hardening
Guest VLAN - tagged on the trunk port
Segmenting Your Proxmox Homelab: Practical VLAN Configuration and Firewall Rules
9 min read
Networking, VLANs & Security Hardening
Setting Up Multiple Physical NICs as Trunk Ports for VLAN
Most homelab tutorials show a single Ethernet cable from your switch into one network port, then tag every other
11 min read
LXC Containers & Docker
Leaky Vessels (CVE-2024-21626): Container Escape Risk for Docker on Proxmox
The Leaky Vessels runc flaw (CVE-2024-21626) lets a container break out to the host. Here is what it means for Docker on Proxmox VMs and LXCs, and how to fix it.
4 min read
Networking, VLANs & Security Hardening
CVE-2024-21545: The Proxmox VE File-Read Bug That Leads to Full Root Takeover
A deep dive into CVE-2024-21545, the authenticated arbitrary file read in Proxmox VE that can be chained into a full root takeover — and how to fix it.
4 min read
Networking, VLANs & Security Hardening
CrowdSec on Proxmox: Cluster-Wide Brute-Force Defense
CrowdSec pre-blocks thousands of known attacker IPs before they reach your Proxmox node — here is the full cluster-ready setup.
7 min read
Networking, VLANs & Security Hardening
Proxmox API Tokens for Secure Automation Without Root
Scoped API tokens take 20 minutes to set up and mean a leaked Terraform key never touches your root account.
10 min read
Networking, VLANs & Security Hardening
Proxmox Two-Factor Authentication: TOTP and WebAuthn Setup
Password auth alone isn't enough. Add TOTP or WebAuthn 2FA to your Proxmox dashboard with this step-by-step setup guide.
10 min read
Networking, VLANs & Security Hardening
Proxmox WireGuard VPN: Secure Remote Access Setup
Run WireGuard VPN directly on Proxmox or in a dedicated VM to get fast, encrypted remote access to your entire homelab.
9 min read
LXC Containers And Docker
Privileged vs Unprivileged LXC Containers on Proxmox
A practical breakdown of privileged vs unprivileged Proxmox LXC containers and when to use each.
11 min read
Networking, VLANs, And Security Hardening
Hardening Proxmox VE: Firewall, fail2ban, and SSH Security
Essential security hardening steps for Proxmox VE — firewall, fail2ban, SSH keys, and 2FA setup.
14 min read