Complete IPv6 routing integration for ORION infrastructure including BGP4+ multiprotocol configuration, router advertisements, and firewall. Components Added: 1. IPV6_ROUTING_INTEGRATION.md (40+ pages) - Complete IPv6 architecture documentation - Address allocation plan for /48 prefix - Network design with subnet breakdown - BIRD2 BGP configuration guide - Router Advertisement (SLAAC) setup - nftables IPv6 firewall rules - Monitoring and verification procedures - Comprehensive troubleshooting guide 2. router-configs/bird2/bird6.conf - BIRD2 daemon configuration for IPv6 BGP - AS394955 (local) to AS6939 (Telus) peering - Three BGP peers with preference weighting - Route filters (inbound/outbound) - Bogon prefix filtering - Graceful restart support - Prefix announcement: 2602:F674::/48 3. router-configs/network/radvd.conf - Router Advertisement daemon configuration - SLAAC for automatic client configuration - Multiple network support (LAN/Guest/Management) - DNS server announcements (Cloudflare) - Prefix information options 4. deploy-ipv6-routing.sh - Automated deployment script for Router VM - Installs BIRD2, radvd, nftables - Configures kernel parameters (IPv6 forwarding) - Sets up network interfaces with IPv6 - Deploys all configuration files - Validates and tests configuration - Provides verification steps Features: IPv6 Network Design: - 2602:F674:0000::/64 - WAN/Transit - 2602:F674:1000::/64 - LAN (Internal Network) - 2602:F674:2000::/64 - Guest Network (isolated) - 2602:F674:3000::/64 - Management Network - 2602:F674:4000::/64 - macOS VM Network - Future expansion: /64 subnets through FFFF BGP Configuration: - Multi-peer BGP with local preference weighting - Primary (150), Secondary (100), Tertiary (50) - Route filtering with bogon rejection - Prefix aggregation and announcement - Graceful restart for minimal downtime Security: - nftables firewall with stateful filtering - ICMPv6 filtering (essential types only) - Guest network isolation from LAN - BGP peer authentication ready - Rate-limited logging Monitoring: - BIRD exporter for Prometheus metrics - BGP session state tracking - Route count monitoring - IPv6 traffic statistics Integration with existing ORION stack for production-ready IPv6 routing with enterprise-grade BGP and automatic client configuration via SLAAC. |
||
|---|---|---|
| .github/workflows | ||
| Artefacts | ||
| EFI | ||
| router-configs | ||
| scripts | ||
| systemd | ||
| tools | ||
| vm-configs | ||
| .gitignore | ||
| .gitmodules | ||
| AI_MAZE_ARCHITECTURE.md | ||
| CHANGELOG.md | ||
| DELL_R730_ORION_PROXMOX_INTEGRATION.md | ||
| IPV6_ROUTING_INTEGRATION.md | ||
| ORION_HYBRID_ARCHITECTURE.md | ||
| ORION_QUICKSTART.md | ||
| QUICKSTART_HYBRID.md | ||
| README.md | ||
| deploy-ai-maze.sh | ||
| deploy-ipv6-routing.sh | ||
| deploy-orion-hybrid.py | ||
| deploy-orion.sh | ||
| install.sh | ||
| orion-config.json | ||
| setup | ||
README.md
🚀 Dell R730 ORION - Hybrid Network Infrastructure
OSX-PROXMOX + NixOS Router + AI Agent + BGP Integration
🎯 ORION Hybrid Architecture
This repository combines the power of OSX-PROXMOX for macOS virtualization with a complete enterprise-grade network infrastructure for the Dell PowerEdge R730 (CQ5QBM2).
✨ What's Included
- ✅ Proxmox VE - Enterprise hypervisor with web management
- ✅ NixOS + VyOS Router - High-performance routing with BGP (AS 394955)
- ✅ AI Autonomous Agent - Intelligent network monitoring and self-healing
- ✅ macOS Sequoia - Full macOS 15 support for development
- ✅ iDRAC Automation - Complete remote management via Redfish API
- ✅ Prometheus + Grafana - Real-time monitoring and dashboards
- ✅ BGP Routing - Multi-peer BGP with Telus (AS 6939)
🚀 Quick Start (ORION Hybrid)
# Clone repository
git clone https://github.com/luci-digital/luci-macOSX-PROXMOX.git
cd luci-macOSX-PROXMOX
# Install dependencies
pip3 install requests
# Run automated deployment
python3 deploy-orion-hybrid.py
Documentation:
- 📘 Hybrid Architecture Guide - Complete architecture documentation
- 🚀 Quick Start Guide - Get started in 5 minutes
- 🔧 VM Configurations - NixOS configuration files
- 📊 Proxmox Integration - Dell R730 specific setup
🏗️ Architecture Overview
Dell R730 ORION (384GB RAM, 56 threads)
├─ Proxmox VE 8.x (Hypervisor)
│ ├─ VM 200: NixOS + VyOS Router (8 cores, 32GB)
│ │ └─ BGP, Firewall, DHCP, DNS, NAT
│ ├─ VM 300: AI Agent (4 cores, 16GB)
│ │ └─ Autonomous monitoring, Prometheus, Grafana
│ └─ VM 100: macOS Sequoia (12 cores, 64GB)
│ └─ Development environment
└─ iDRAC Enterprise - Full remote management
📦 Repository Structure
luci-macOSX-PROXMOX/
├── deploy-orion-hybrid.py # Main deployment automation
├── deploy-orion.sh # Legacy Proxmox deployment
├── orion-config.json # Hardware & VM configuration
├── vm-configs/ # NixOS VM configurations
│ ├── router-vm/ # Router VM (NixOS + VyOS)
│ └── ai-agent-vm/ # AI monitoring agent
├── ORION_HYBRID_ARCHITECTURE.md # Full architecture docs
├── QUICKSTART_HYBRID.md # Quick start guide
└── tools/ # Utility scripts
🌟 Key Features
Hybrid Design: Best of both worlds - virtualization flexibility with bare-metal routing performance
Full Automation: Deploy entire stack with one command via iDRAC Redfish API
Declarative Configuration: NixOS-based router and AI agent for reproducible deployments
AI-Powered Monitoring: Autonomous agent that monitors, alerts, and self-heals network issues
BGP Routing: Production-grade routing with BIRD2, supporting multi-peer BGP
macOS Development: Native macOS Sequoia environment via OSX-PROXMOX
🍎 Original OSX-PROXMOX Guide
The following guide provides the original OSX-PROXMOX installation method for running macOS on Proxmox VE with AMD or Intel hardware.
🛠 Installation Guide
- Install a FRESH/CLEAN version of Proxmox VE (v7.0.XX ~ 8.4.XX) - just follow the Next, Next & Finish (NNF) approach.
- Preliminary support for Proxmox VE V9.0.0 BETA.
- Open the Proxmox Web Console → Navigate to
Datacenter > YOUR_HOST_NAME > Shell. - Copy, paste, and execute the command below:
/bin/bash -c "$(curl -fsSL https://install.osx-proxmox.com)"
🎉 Voilà! You can now install macOS!

🔧 Additional Configuration
Install EFI Package in macOS (Disable Gatekeeper First)
sudo spctl --master-disable
🍏 macOS Versions Supported
✅ macOS High Sierra - 10.13
✅ macOS Mojave - 10.14
✅ macOS Catalina - 10.15
✅ macOS Big Sur - 11
✅ macOS Monterey - 12
✅ macOS Ventura - 13
✅ macOS Sonoma - 14
✅ macOS Sequoia - 15
🖥 Proxmox VE Versions Supported
✅ v7.0.XX ~ 8.4.XX
🔄 OpenCore Version
- April/2025 - 1.0.4 → with SIP Enabled, DMG only signed by Apple and all features of securities
☁️ Cloud Support (Run Hackintosh in the Cloud!)
- 🌍 VultR
- 📺 Video Tutorial (Enable captions for better understanding)
- Now has configurable bridges, and can add as many bridges and specify the subnet for them.
⚠️ Disclaimer
🚨 FOR DEVELOPMENT, STUDENT, AND TESTING PURPOSES ONLY.
I am not responsible for any issues, damage, or data loss. Always back up your system before making any changes.
📌 Requirements
Since macOS Monterey, your host must have a working TSC (timestamp counter). Otherwise, if you assign multiple cores to the VM, macOS may crash due to time inconsistencies. To check if your host is compatible, run the following command in Proxmox:
dmesg | grep -i -e tsc -e clocksource
✅ Expected Output (for working hosts):
clocksource: Switched to clocksource tsc
❌ Problematic Output (for broken hosts):
tsc: Marking TSC unstable due to check_tsc_sync_source failed
clocksource: Switched to clocksource hpet
🛠 Possible Fixes
- Disable "ErP mode" and all C-state power-saving modes in your BIOS. Then power off your machine completely and restart.
- Try forcing TSC in GRUB:
- Edit
/etc/default/gruband add:clocksource=tsc tsc=reliable - Run
update-gruband reboot (This may cause instability).
- Edit
- Verify the TSC clock source:
The output must becat /sys/devices/system/clocksource/clocksource0/current_clocksourcetsc.
🔍 Troubleshooting
❌ High Sierra & Below - Recovery Server Could Not Be Contacted
If you encounter this error, you need to switch from HTTPS to HTTP in the installation URL:
-
When the error appears, leave the window open.
-
Open Installer Log (
Window > Installer Log). -
Search for "Failed to load catalog" → Copy the log entry.
-
Close the error message and return to
macOS Utilities. -
Open Terminal, paste the copied data, and remove everything except the URL (e.g.,
https://example.sucatalog). -
Change
https://tohttp://. -
Run the command:
nvram IASUCatalogURL="http://your-http-url.sucatalog" -
Quit Terminal and restart the installation.
❌ Problem for GPU Passthrough
If you see an Apple logo and the bar doesn’t move on your external display, you need to disable “above 4g decoding” in the motherboard’s BIOS.
In some environments it is necessary to segment the IOMMU Groups to be able to pass the GPU to the VM.
- Add the content
pcie_acs_override=downstream,multifunction pci=nommconfin the file/etc/default/grubat the end of the lineGRUB_CMDLINE_LINUX_DEFAULT; - After changing the grub file, run the command
update-gruband reboot your PVE.
🎥 Demonstration (in Portuguese)
📽️ Watch on YouTube
(Enable auto-translate captions for English subtitles!)
🎖 Credits
- OpenCore/Acidanthera Team - Open-source bootloader
- Corpnewt - Tools (ProperTree, GenSMBIOS, etc.)
- Apple - macOS
- Proxmox - Fantastic virtualization platform & documentation