A Modern Proxmox Docker Architecture with Disposable VMs, VirtIO-FS, and ZFS
21 days ago
- Proxmox with ZFS, disposable VMs via cloud-init linked clones, and rootless Docker provide a secure, efficient architecture.
- Persistent data is stored on separate ZFS datasets with encryption and backups, while ephemeral Docker layers are unbacked.
- VirtIO-FS with VFS ID-mapping enables direct host-to-VM file sharing with proper UID/GID translation.
- Lightweight multi-tenant VMs run multiple services in isolated rootless Docker namespaces, each with its own user and disk.
- Heavyweight single-tenant VMs are used for critical services like Nextcloud for maximum isolation.
- Automation via Git tracking, cron updates, and Ansible maintains consistency and reduces manual effort.