On my ProxMox machine, I need a more dynamic way of handling containers rather than being limited to the LXC flavour offered by ProxMox. There was a question on reddit to which I supplied an answer about why to use full virtualization for Kubernetes vs running in a container. In summary:
- proxmox is a virtualization engine which enables LXC containers and QEMU/KVM guest virtual machines
- LXC containers are compartmentalized and share direct access to the kernel
- containers are used so as not to pollute your based proxmox installation with more packages and runtimes
- typically, you don't want to nest containers inside containers
- virtual machines run their own kernel/operating system, and are more secure (failure/security) and independent
- since k8s manages docker containers (not LXC containers), and you don't want to run containers of any fashion in containers of another fashion (docker inside lxc), you run a virtual machine with k8s to keep k8s packages and runtime separate from the core proxmox runtime environment
- hence the container inside virtual machine on hypervisor platform
- for security and compartmentalization
I built a basic LXC management container to take a look at talosctl, then used these instructions to perform a few tests:
apt update apt upgrade apt install --no-install-recommends curl # based upon https://www.talos.dev/v1.9/talos-guides/install/talosctl/ curl -sL https://talos.dev/install | sh # based upon https://kubernetes.io/docs/tasks/tools/install-kubectl-linux/ curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl.sha256" echo "$(cat kubectl.sha256) kubectl" | sha256sum --check install -o root -g root -m 0755 kubectl /usr/local/bin/kubectl kubectl version --client
I ultimately removed this container, as I started reading the Getting Started Guide. But the above did generate the information that the lastest talosctl version is v1.9.1, which is useful for generating the iso image required.
.... more to come
Reference: