| >A lot of our week is made up of the same kinds of small tasks: provision a VM, tweak storage settings, pass through a device, replicate a dataset, share a file, test an image, throw the machine away, do it again. None of that is exciting. All I read is that they are still doing ClickOPS over DevSecOps!! At no moment I heard automation, if you aren't using automation in 2026, your future in IT is cooked. I run Proxmox at home for my homelab. I used to use VMs and now I have fully adopted Proxmox LXC containers (I hate Docker). I use Ansible to automate everything. Last night I wanted to setup a notification service called Gotify, the Ansible playbook must: 1. Create a LXC container with specified resources 2. Prepare the system, network and what not 3. Give me a fully operational LXC and service running, go to the browser and voila. All of that by running one command line, so now I can deploy it over and over. I have setup a LXC container running Radarr, qBittorrent, Sonarr, Jackett, WireGuard VPN via Proton VPN, Iptables firewall aka kill-switch. All of what you just read running within a LXC container fully automated via Ansible, OP is doing everything manually. Even if I was running Sylve, Ansible would be doing the whole automation stuff. |
> All I read is that they are still doing ClickOPS over DevSecOps!!
Their setup is mostly working on embedded stuff, and this involves some amount of moving VM disk images around, sometimes they run different software within the same VM disk, so that means ZFS properties need to be tweaked accordingly (compression, recordsize, etc). This is a lot easier to do with a UI than it is with CLI, and the UI is pretty good at showing you what’s going on. Now I'm all for automating stuff, but there's no clear pattern here to automate away,
Now regarding automation in Sylve, you can create a template out of Sylve (with networking, storage, CPU config etc.) and then deploy that template as many times as you want (from the UI), last I checked proxmox only allows you to clone from template one at a time.
What I do is pretty similar to what you mention, but I don't really use ansible since on FreeBSD if it's in the ports tree its one command (after base system is set up) which is `pkg install -y <package>`. And your entire stack (from your list), can be done with one command each. The only thing I see that would need a bit setup would be the wireguard vpn, but even that is pretty straightforward under FreeBSD (so you can do it with a jail and no need for a VM).