Hey all, just hoping to get some advice on any software out there that can help me keep on top of all the VMs i’m running on my Proxmox instances, and potentially my other machines I have too.

I’m looking for a way to help me stay on top of updates and things like when the machine was last online, last rebooted etc etc. There are commercial products for such a thing, and I don’t necessarily want to install any sort of Agent on each of the machines (if I can avoid it).

I looked at something like Homarr, but not sure if that’s what i’m really after.

What recommendations do all you have?

  • OminousOrange@lemmy.ca
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    2 days ago

    I use Ultimate Updater connected to gotify to tell me which machines have updates with a noti every day. I can then run update and it will take snapshots and upgrade everything when needed.

    It really only does linux systems and wont do docker, but there’s watchtower (the one that’s still alive) to do that.

  • tofu
    link
    fedilink
    English
    arrow-up
    7
    ·
    4 days ago

    Ansible doesn’t need an agent besides python and can take care of most kinds of updates. You have to run/schedule it regularly though. It’s pretty good for updating multiple hosts at once (assuming they mostly have the same OSes).

    For uptime, CPU etc you mostly need agents but Proxmox also shows some of these in the UI.

    • Matty_r@programming.devOP
      link
      fedilink
      English
      arrow-up
      2
      ·
      3 days ago

      Cheers I’ll check out Ansible, it been on my lost of things to look at over the years anyway so its a good excuse to dig into it

    • ryokimball@infosec.pub
      link
      fedilink
      English
      arrow-up
      2
      ·
      4 days ago

      AWX is basically Ansible as a service.

      Wait. That sounds dumb. Hosted and centralized Ansible?

      Idk. Brain not braining. Just saying, it’s worth checking out.

      • Possibly linux@lemmy.zip
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 days ago

        AWX is a pain to install and maintain. Development has also been cut for the most part since Redhat wants you to use Tower.

      • tofu
        link
        fedilink
        English
        arrow-up
        1
        ·
        4 days ago

        True, but I’m not sure I’d put up awx nowadays. At work we migrated from Tower/AWX to Ansible in Gitlab pipelines because of constant problems and I’m thinking about doing a similar thing in my Forgejo. I’m not much of a fan if running Ansible via CLI except for development purposes. Too much trouble with variables

  • TheUniverseandNetworks@lemmy.world
    link
    fedilink
    English
    arrow-up
    3
    ·
    3 days ago

    As others have said, if your VMs are Linux, set up unattended_updates and forget about it.

    If your VMs are windows, then Action1 is free up to 200 clients, it does need an agent installed, but that auto updates too.

    • koala@programming.dev
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 days ago

      Yep, I do that on Debian hosts, EL (RHEL/Rocky/etc.) have a similar feature.

      However, you need to keep an eye for updates that require a reboot. I use my own Nagios agent that (among other things) sends me warnings when hosts require a reboot (both apt/dnf make this easy to check).

      I wouldn’t care about last online/reboots; I just do some basic monitoring to get an alert if a host is down. Spontaneous reboots would be a sign of an underlying issue.

  • conrad82@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    ·
    4 days ago

    They were talking about something similar on episode 38 of https://hybridcloudshow.com/ I think. I see that it is not out yet, I got it early because I pay for the subscription. When it comes out you could give it a listen

    I didn’t catch everything, but Ansible might be worth looking into

  • MangoPenguin@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    3
    ·
    edit-2
    4 days ago

    I run debian on everything, so I set up unattended-upgrades for security updates and basically forget about it. Docker updates are also automatic with Komodo, just make sure databases are pinned to a major version.

    For monitoring my services I use Uptime Kuma, and get an alert if a service goes down so I can fix it.

    Been pretty solid for years now. Things get rebooted every month or two when I do a Proxmox upgrade and reboot the host.

  • cecilkorik@lemmy.ca
    link
    fedilink
    English
    arrow-up
    3
    ·
    edit-2
    4 days ago

    I’ve always felt like this is an area with a huge gap. I’ve got my own fragile, cobbled-together bullshit that works for me, but it’s far from ideal or reliable if I’m being honest. I do love Ansible’s general idea of relying on standard, always-ish available protocols like ssh as a universal connection method, and I think it could work well as the bulletproof lower layer when you want to use direct control over the CLI tools and configuration files, like what git provides for anything requiring version control, but ansible needs a slick management interface like github/forgejo provides on top of git, to fill in the higher level UI for when you need a wider scope to get an overview of what’s going on or to make general configuration changes without needing to get your hands dirty. Ideally it would look a lot like Proxmox itself does, just, not specific to Proxmox. Like if I want to add my Steam Deck, and I’ve got ssh enabled on it and it’s not asleep, it should be able to ansible its way in there somehow to at least get whatever basic details it can. Maybe that’s only basic system information at first, but from there I could work on customizing it. That’s what I would consider the ideal, for me at least.

    • Matty_r@programming.devOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      4 days ago

      Yea that was going to be my next step if I don’t find anything that fits my needs, I’ll make it - but this is a solved problem for sure. I just need the right thing that’s close enough to what I’m looking for.

  • AnIntenseMoist@lemmy.world
    link
    fedilink
    English
    arrow-up
    3
    ·
    4 days ago

    Very few things out there don’t require an agent. TacticalRMM is a decent self-hosted device management platform, but I don’t really trust them after some controversy with an embedded Monero miner in the agent (has since been removed, but come on).

    MeshCentral is what TRMM uses for its remoting and its pretty robust, but doesn’t do patch management on its own. If most of your infrastructure is Linux, you can easily handle it yourself though.

    TBH, manual management would be the easiest if your infrastructure is small enough.

  • jimmy90@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    2
    ·
    3 days ago

    Podman inside Nixos inside LXC inside Proxmox

    Auto updates configurable everywhere

    • Lka1988@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      3 days ago

      Podman inside Nixos inside LXC inside Proxmox

      y tho

      If you’re running Proxmox already, just spin up a VM for Podman/Docker and set up unattended-upgrades. Boom, done. You don’t need a whole lot of CPU or RAM for that, either.