mrcharles 28e0b0c7a6 docs(audit): fresh fleet audit + fix stale paths across 13 perf scripts
Fresh Proxmox fleet audit (2026-07-28) with current VM placements, RAM,
CPU, and storage for all 7 reachable hosts. Written to
docs/proxmox/AUDIT-2026-07-28.md — supersedes placement data in
PROJECT.md sections 4-8.

Key audit findings:
- CRITICAL: UCS01/02 and netinfra01/02 HA pairs both still on tsys4
  storage. tsys4 failure = DNS/DHCP/NTP + LDAP/AD fully dark. These
  migrations were the #1 recommendation from the previous audit and
  have not been done.
- CRITICAL: 2 of 3 active k3s cnodes (cnode1 + cnode2) on tsys4 NFS.
  tsys4 failure = etcd quorum lost.
- 59% of running VMs still on tsys4 storage (improved from 68%).
- cnode VMIDs have changed since PROJECT.md was written (cnode1 is now
  VMID 906 on tsys9, cnode2 is VMID 705 on tsys7, etc.)

Gardening fixes:
- Removed duplicate fleet-audit.sh (check.sh + deploy-check.sh already
  exist for this purpose)
- Fixed hardcoded path /home/reachableceo/projects/perfopt in 13 perf/
  scripts to use BASH_SOURCE-derived relative paths (per AGENTS.md
  self-locating scripts convention)
- Updated STATUS.md Known Issues with the two critical findings
- Updated STATUS.md Pending with prioritized pre-k8s action items
- Registered AUDIT-2026-07-28.md in docmap.md

💘 Generated with Crush

Assisted-by: Crush:glm-5.2
2026-07-28 20:07:09 -05:00
2024-10-12 03:38:27 +00:00

PFVCluster

Unified infrastructure repo for the Known Element Enterprises Proxmox R&D cluster.

→ Current Status · → Documentation Index · → Agent Guidelines

Directory Structure

Directory Description
provisioning/ Server provisioning (SetupNewSystem.sh, security hardening, 2FA, NTP/DNS config, SNMP, Dell OMSA)
tests/ Test suite + VM validation harness
dns-cluster-setup/ Technitium DNS cluster replication scripts
k8s/ k3s cluster setup scripts (3-node HA control plane over Tailscale)
powerman/ Cyclades PM10i PDU management via powerman on pfv-tsys1
console/ Serial console management (ser2net + conman) for network switches on pfv-tsys4
perf/ Proxmox performance tuning, fleet audit, iperf, switch diagnostics
netinfra/ pfv-netinfra-01/02 DNS/NTP setup + audit scripts
switches/ Switch configuration captures
docs/ All documentation (see docmap)
vendor/ Vendored KNELShellFramework

Quick Start

Provision a new server

sudo bash provisioning/SetupNewSystem.sh

Validate on the sandbox VM

VM_ID=6000 ./tests/vm-validation.sh all

Deploy DNS cluster

cd dns-cluster-setup/ && ./setup.sh all

Deploy perf tunings

cd perf/ && ./deploy-tuning.sh

Architecture

  • Proxmox hosts: 7 standalone PVE installs managed via PDM
  • DNS: Technitium (authoritative) + Pi-hole (recursive) on pfv-netinfra-01/02
  • NTP: pfv-netinfra-01/02 (redundant, LAN IPs, stratum 2/3)
  • Production: Cloudron VPS in Reston VA (this cluster is R&D only)
  • Backups: Proxmox Backup Server (PBS)
S
Description
All things related to the PFV proxmox/k8s cluster .
Readme AGPL-3.0
6.8 MiB
Languages
Shell 69.6%
Python 25.8%
Perl 4.4%
Makefile 0.2%