Proxmox

Proxmox VE is an incredible virtualization platform, but a fresh install needs hardening before it’s production-ready. This guide covers everything from basic configuration to advanced security controls. Prerequisites Proxmox VE 8.x installed on bare metal Physical access or IPMI/iKVM for recovery Basic Linux command line familiarity 1. Repository Configuration Disable Enterprise Repositories By default, Proxmox uses enterprise repositories that require a subscription. For homelab use, switch to the community repositories: ...

Managing a homelab is a constant battle between “set it and forget it” and “everything is on fire.” After years of manual script maintenance, I decided to build Clawd — a hierarchical AI assistant that orchestrates my entire infrastructure. The Problem Every homelab owner knows the drill: SSH into multiple machines to check status Remember which scripts need to run when Monitor services across Proxmox VMs, Docker containers, and NAS Keep track of updates, backups, and security alerts My solution? Build an AI that understands my infrastructure and can execute tasks on my behalf. ...

Maintaining a homelab is a constant cycle of automation and observation. This week, during a deep audit with Clawd, we pushed several significant updates to the core infrastructure to improve reliability and security. 1. Platform Hardening & Signal Migration With the release of OpenClaw v2026.2.24, delivery policies for heartbeats changed. To comply with the new security standard (blocking automated pushes in DMs), we migrated all system alerts and heartbeats to a dedicated Signal Alert Group. This ensures our 1-on-1 chat stays focused on high-level decision-making while technical logs stream to the audit group. ...

Hardening the Lab: Proxmox & LXC Edition Running a homelab is the best way to learn, but it also increases your local attack surface. If you’re running Proxmox VE, you’re sitting on a powerful hypervisor that needs more than just a strong password. 1. Disable the Enterprise Repository Unless you’re paying for a subscription, the enterprise repo will give you persistent errors. Switch to the no-subscription repository to keep your system updated. ...