RMU build Gen-1.5: IV. Best Practices - A. Proxmox Security

This page is part of the Gen-1.5 RMU build runbook.

Go back to the previous section: III. Maas - E. Configure CHCP Subnet on MaaS

A. Proxmox Security (Recommended)

1. Enable Proxmox Firewall Datacenter level
   • On the Proxmox WebUI, select Datacenter on the left panel, then in the middle panel, scroll down to Firewall -> Options and select the top Firewall configuration option in the main panel. Click on Edit at the top of the list.
   • 
   • On the pop-up dialog window, tick the Firewall box and select OK
   • 
2. Enable Proxmox Firewall RMU level
   • On the Proxmox WebUI, select the RMU on the left panel, then in the middle panel, scroll down to Firewall -> Options and select the top Firewall configuration option in the main panel. Click on Edit at the top of the list.
   • 
   • On the pop-up dialog window, tick the Firewall box and select OK
   • 
3. Disable RPCBIND
   • On the Proxmox WebUI, select the RMU on the left panel
   • 
   • Select Shell in the top right
   • 
   • Run these commands one at a time within that shell prompt

     systemctl disable rpcbind.target
     systemctl disable rpcbind.socket
     systemctl disable rpcbind.service
     systemctl stop rpcbind.target
     systemctl stop rpcbind.socket
     systemctl stop rpcbind.service
     

     
     

Continue to next section: B. Install RACADM Tool on RMU

Go to the index of the Gen-1.5 RMU build runbook.