Disable MeltDown

vi /etc/default/grub
GRUB_CMDLINE_LINUX_DEFAULT="quiet nopti noibrs noibpb nospec nospectre_v2 nospec_store_bypass_disable"

Noatime for FS

vi /etc/fstab
/dev/pve/root / xfs noatime,defaults 0 1

Update the APT source repo for “No Subscription” repo

vi /etc/apt/sources.list.d/pve-enterprise.list
#deb https://enterprise.proxmox.com/debian/pve stretch pve-enterprise
deb http://download.proxmox.com/debian/pve stretch pve-no-subscription

Adjust Swappness

vi /etc/sysctl.conf
vm.swappiness = 10
fs.inotify.max_user_watches = 524288
vm.dirty_background_ratio = 5
vm.dirty_ratio = 10

Disable Lid switch to Sleep Mode

nano /etc/systemd/logind.conf
HandleLidSwitch=ignore
systemctl restart systemd-logind

Use a Desktop Manager to switch off monitor automatically

# install XFCE4 
apt install xfce4 xfce4-power-manager
# Config Auto Logon for "Root" (Definitely it is not a good practices, but don't care
nano /etc/pam.d/lightdm-autologin
# Comment out #auth      required pam_succeed_if.so user != root quiet_success
nano /etc/lightdm/lightdm.conf
autologin-user=root
autologin-user-timeout=0
autologin-session=lightdm-xsession
# Add New Group for autologin
groupadd -r autologin
gpasswd -a root autologin
# Config Power Management to switch off Monitor in 2 mins

Enable Jumbo frame

nano /etc/network/interfaces

iface enp4s0 inet manual
mtu 9000
auto vmbr0
iface vmbr0 inet static
address 192.168.1.210
netmask 255.255.255.0
gateway 192.168.1.1
bridge_ports enp4s0
bridge_stp off
bridge_fd 0
mtu 9000

Change TCP/IP Congestion Control algo

modprobe tcp_bbr
echo "tcp_bbr" >> /etc/modules-load.d/modules.conf
echo "net.core.default_qdisc=fq" >> /etc/sysctl.conf
echo "net.ipv4.tcp_congestion_control=bbr" >> /etc/sysctl.conf
#Save the settings
sysctl -p
#Check the settings
sysctl net.ipv4.tcp_available_congestion_control
sysctl net.ipv4.tcp_congestion_control</code>
<pre>

Provision LVM Thinpool 
<pre class="prettyprint">
pvcreate /dev/sdb
vgcreate xxxxx
lvcreate -v -L 465G -T hdd/hdd

################################

# pvecm expected 1

# service pve-cluster restart