Data collected by live audit on 2026-07-11. Regenerate rather than hand-edit resource numbers.
- Cluster HomeLab, PVE 9.2.2–9.2.3, corosync with 6 member nodes of which 2 are long-dead (R610, R710-2 — last seen 2026-06-13). 4/6 votes online is the bare quorum majority: if any live node goes down, the cluster loses quorum and management freezes. Remove the dead nodes (
pvecm delnode) or adjust expected votes.
- HA: watchdog armed, current master SuperPC. Exactly one HA resource exists: ct:105 (n8n) — either intentional (top-priority automation) or leftover; decide and either expand HA to critical services (NPM, Authentik) or drop it.
| Store |
Type |
Content |
| local |
dir |
backup, iso, import, vztmpl |
| local-lvm |
lvmthin |
images, rootdir |
| ceph-storage |
rbd |
rootdir, images |
| cephfs |
cephfs |
vztmpl, import, snippets, iso, backup |
| immich-data |
rbd (alias of ceph-storage pool) |
rootdir, images |
- Sunday 01:00, snapshot mode, zstd, → cephfs, keep-last=4, mail on failure to codyhanna8@gmail.com
- Covered VMIDs: 105, 106, 107, 108, 109, 110, 111, 400, 401
- ⚠️ Not covered: 112, 113, 114, 115, 116, 117, 118, 119, 120 — including Authentik (identity!), OpenProject, Ghost, Wiki.js. See Audit Findings. (114 Storj at 423G may be a deliberate exclusion.)
- Backups live on the same Ceph cluster they protect — fine for oops-recovery, useless for cluster-wide failure. No offsite copy yet.
debian-13-standard_13.1-2_amd64.tar.zst on cephfs — the standard base for every LXC.
- LXC-first: everything is a container unless it needs a real kernel/GPU passthrough (only Jellyfin + amp-worker are VMs).
- New LXC: Debian 13, unprivileged +
nesting=1 (add keyctl=1 for Docker), rootfs on ceph-storage, static IP, one service (or one compose stack) per container, stack in /opt/<service>.
- VMID = creation order (105…120); guest IP loosely tracks VMID (.200 onward).
- GPU passthrough: VM 401 gets hostpci 0000:64:00.0+.1 (GPU+audio) with OVMF/q35.
- PVE versions drift slightly between nodes (9.2.2 vs 9.2.3) — update NAS at next window.
See the Create LXC SOP for the full checklist.