This commit integrates a hybrid network infrastructure that combines: - Proxmox VE (virtualization flexibility) - NixOS + VyOS Router (high-performance routing) - AI Autonomous Agent (intelligent monitoring) - macOS Sequoia support (development environment) - Full iDRAC Redfish API automation Major Changes: -------------- 1. NEW: deploy-orion-hybrid.py - Python-based deployment orchestrator - Full iDRAC Redfish API integration - Automated VM provisioning wizard - Power management (on/off/reboot/status) - Guided deployment process 2. NEW: VM Configurations (vm-configs/) Router VM (VM 200): - NixOS 24.11 + VyOS configuration - BIRD2 BGP routing (AS 394955, peers with Telus AS 6939) - nftables high-performance firewall - Unbound DNS with DNS-over-TLS - Kea DHCP server - Multi-interface: WAN, LAN, Guest, Management AI Agent VM (VM 300): - Autonomous network monitoring agent (Python) - Prometheus metrics collection (port 9090) - Grafana dashboards (port 3000) - Self-healing capabilities - BGP session monitoring - Automatic remediation 3. UPDATED: orion-config.json - Version bumped to 2.0.0-hybrid - Router VM changed from pfSense to NixOS + VyOS - Added AI Agent VM (300) configuration - Updated resource allocation - Enhanced service descriptions - Added feature list 4. NEW: Documentation ORION_HYBRID_ARCHITECTURE.md: - Complete architecture documentation - Network diagrams and topology - VM specifications and configurations - Deployment process guide - Monitoring and management - Troubleshooting guide QUICKSTART_HYBRID.md: - 5-minute quick start guide - Step-by-step VM creation - Network bridge setup - Verification checklist - Essential commands reference vm-configs/README.md: - VM configuration guide - Installation procedures - Customization examples - Network diagrams 5. UPDATED: README.md - Added ORION Hybrid Architecture section - Quick start for hybrid deployment - Architecture overview diagram - Repository structure guide - Key features highlight - Preserved original OSX-PROXMOX content Architecture Highlights: ----------------------- VM 200 (Router): • 8 cores, 32GB RAM • BGP routing with 3 Telus peers (206.75.1.127/47/48) • IPv6 support (2602:F674::/48) • NAT, firewall, DHCP, DNS services • Prometheus metrics export VM 300 (AI Agent): • 4 cores, 16GB RAM • Real-time network monitoring • Automatic BGP session restart on failure • CPU/memory/bandwidth tracking • Alert generation and notification • Hourly status reports VM 100 (macOS): • 12 cores, 64GB RAM (preserved from original) • macOS Sequoia 15 • Development environment Network: • WAN: 10GbE Telus Fiber (vmbr0) • LAN: 192.168.100.0/24 (vmbr1) • Guest: 192.168.200.0/24 (vmbr2) • Management: 192.168.1.0/24 Benefits of Hybrid Approach: ---------------------------- ✓ Flexibility: Proxmox allows running multiple VMs/containers ✓ Performance: Dedicated routing VM with minimal overhead ✓ Declarative: NixOS configurations are version-controlled and reproducible ✓ Intelligence: AI agent provides autonomous monitoring and healing ✓ macOS Support: Preserved OSX-PROXMOX functionality ✓ Automation: Full iDRAC API control for remote deployment ✓ Production-Ready: BGP routing with proper firewall and monitoring Technical Details: ----------------- - Python 3 deployment script with proper error handling - NixOS declarative configurations for reproducibility - Prometheus + Grafana monitoring stack - BIRD2 for enterprise-grade BGP - nftables for high-performance packet filtering - DNS-over-TLS for privacy - IPv4 + IPv6 dual-stack support - Automatic system updates Testing: -------- All configurations tested and validated: - iDRAC API connectivity - Deployment wizard workflow - VM configuration syntax - Network topology design - Documentation accuracy Next Steps for Users: -------------------- 1. Run: python3 deploy-orion-hybrid.py 2. Follow the deployment wizard 3. Install Proxmox VE 4. Create VMs using provided configs 5. Access Grafana at http://192.168.100.20:3000 Breaking Changes: ---------------- None - This is an additive change. Original deploy-orion.sh remains functional for users who prefer pfSense over VyOS. Version: 2.0.0-hybrid Date: 2025-01-20 |
||
|---|---|---|
| .github/workflows | ||
| Artefacts | ||
| EFI | ||
| scripts | ||
| systemd | ||
| tools | ||
| vm-configs | ||
| .gitignore | ||
| .gitmodules | ||
| CHANGELOG.md | ||
| DELL_R730_ORION_PROXMOX_INTEGRATION.md | ||
| ORION_HYBRID_ARCHITECTURE.md | ||
| ORION_QUICKSTART.md | ||
| QUICKSTART_HYBRID.md | ||
| README.md | ||
| deploy-orion-hybrid.py | ||
| deploy-orion.sh | ||
| install.sh | ||
| orion-config.json | ||
| setup | ||
README.md
🚀 Dell R730 ORION - Hybrid Network Infrastructure
OSX-PROXMOX + NixOS Router + AI Agent + BGP Integration
🎯 ORION Hybrid Architecture
This repository combines the power of OSX-PROXMOX for macOS virtualization with a complete enterprise-grade network infrastructure for the Dell PowerEdge R730 (CQ5QBM2).
✨ What's Included
- ✅ Proxmox VE - Enterprise hypervisor with web management
- ✅ NixOS + VyOS Router - High-performance routing with BGP (AS 394955)
- ✅ AI Autonomous Agent - Intelligent network monitoring and self-healing
- ✅ macOS Sequoia - Full macOS 15 support for development
- ✅ iDRAC Automation - Complete remote management via Redfish API
- ✅ Prometheus + Grafana - Real-time monitoring and dashboards
- ✅ BGP Routing - Multi-peer BGP with Telus (AS 6939)
🚀 Quick Start (ORION Hybrid)
# Clone repository
git clone https://github.com/luci-digital/luci-macOSX-PROXMOX.git
cd luci-macOSX-PROXMOX
# Install dependencies
pip3 install requests
# Run automated deployment
python3 deploy-orion-hybrid.py
Documentation:
- 📘 Hybrid Architecture Guide - Complete architecture documentation
- 🚀 Quick Start Guide - Get started in 5 minutes
- 🔧 VM Configurations - NixOS configuration files
- 📊 Proxmox Integration - Dell R730 specific setup
🏗️ Architecture Overview
Dell R730 ORION (384GB RAM, 56 threads)
├─ Proxmox VE 8.x (Hypervisor)
│ ├─ VM 200: NixOS + VyOS Router (8 cores, 32GB)
│ │ └─ BGP, Firewall, DHCP, DNS, NAT
│ ├─ VM 300: AI Agent (4 cores, 16GB)
│ │ └─ Autonomous monitoring, Prometheus, Grafana
│ └─ VM 100: macOS Sequoia (12 cores, 64GB)
│ └─ Development environment
└─ iDRAC Enterprise - Full remote management
📦 Repository Structure
luci-macOSX-PROXMOX/
├── deploy-orion-hybrid.py # Main deployment automation
├── deploy-orion.sh # Legacy Proxmox deployment
├── orion-config.json # Hardware & VM configuration
├── vm-configs/ # NixOS VM configurations
│ ├── router-vm/ # Router VM (NixOS + VyOS)
│ └── ai-agent-vm/ # AI monitoring agent
├── ORION_HYBRID_ARCHITECTURE.md # Full architecture docs
├── QUICKSTART_HYBRID.md # Quick start guide
└── tools/ # Utility scripts
🌟 Key Features
Hybrid Design: Best of both worlds - virtualization flexibility with bare-metal routing performance
Full Automation: Deploy entire stack with one command via iDRAC Redfish API
Declarative Configuration: NixOS-based router and AI agent for reproducible deployments
AI-Powered Monitoring: Autonomous agent that monitors, alerts, and self-heals network issues
BGP Routing: Production-grade routing with BIRD2, supporting multi-peer BGP
macOS Development: Native macOS Sequoia environment via OSX-PROXMOX
🍎 Original OSX-PROXMOX Guide
The following guide provides the original OSX-PROXMOX installation method for running macOS on Proxmox VE with AMD or Intel hardware.
🛠 Installation Guide
- Install a FRESH/CLEAN version of Proxmox VE (v7.0.XX ~ 8.4.XX) - just follow the Next, Next & Finish (NNF) approach.
- Preliminary support for Proxmox VE V9.0.0 BETA.
- Open the Proxmox Web Console → Navigate to
Datacenter > YOUR_HOST_NAME > Shell. - Copy, paste, and execute the command below:
/bin/bash -c "$(curl -fsSL https://install.osx-proxmox.com)"
🎉 Voilà! You can now install macOS!

🔧 Additional Configuration
Install EFI Package in macOS (Disable Gatekeeper First)
sudo spctl --master-disable
🍏 macOS Versions Supported
✅ macOS High Sierra - 10.13
✅ macOS Mojave - 10.14
✅ macOS Catalina - 10.15
✅ macOS Big Sur - 11
✅ macOS Monterey - 12
✅ macOS Ventura - 13
✅ macOS Sonoma - 14
✅ macOS Sequoia - 15
🖥 Proxmox VE Versions Supported
✅ v7.0.XX ~ 8.4.XX
🔄 OpenCore Version
- April/2025 - 1.0.4 → with SIP Enabled, DMG only signed by Apple and all features of securities
☁️ Cloud Support (Run Hackintosh in the Cloud!)
- 🌍 VultR
- 📺 Video Tutorial (Enable captions for better understanding)
- Now has configurable bridges, and can add as many bridges and specify the subnet for them.
⚠️ Disclaimer
🚨 FOR DEVELOPMENT, STUDENT, AND TESTING PURPOSES ONLY.
I am not responsible for any issues, damage, or data loss. Always back up your system before making any changes.
📌 Requirements
Since macOS Monterey, your host must have a working TSC (timestamp counter). Otherwise, if you assign multiple cores to the VM, macOS may crash due to time inconsistencies. To check if your host is compatible, run the following command in Proxmox:
dmesg | grep -i -e tsc -e clocksource
✅ Expected Output (for working hosts):
clocksource: Switched to clocksource tsc
❌ Problematic Output (for broken hosts):
tsc: Marking TSC unstable due to check_tsc_sync_source failed
clocksource: Switched to clocksource hpet
🛠 Possible Fixes
- Disable "ErP mode" and all C-state power-saving modes in your BIOS. Then power off your machine completely and restart.
- Try forcing TSC in GRUB:
- Edit
/etc/default/gruband add:clocksource=tsc tsc=reliable - Run
update-gruband reboot (This may cause instability).
- Edit
- Verify the TSC clock source:
The output must becat /sys/devices/system/clocksource/clocksource0/current_clocksourcetsc.
🔍 Troubleshooting
❌ High Sierra & Below - Recovery Server Could Not Be Contacted
If you encounter this error, you need to switch from HTTPS to HTTP in the installation URL:
-
When the error appears, leave the window open.
-
Open Installer Log (
Window > Installer Log). -
Search for "Failed to load catalog" → Copy the log entry.
-
Close the error message and return to
macOS Utilities. -
Open Terminal, paste the copied data, and remove everything except the URL (e.g.,
https://example.sucatalog). -
Change
https://tohttp://. -
Run the command:
nvram IASUCatalogURL="http://your-http-url.sucatalog" -
Quit Terminal and restart the installation.
❌ Problem for GPU Passthrough
If you see an Apple logo and the bar doesn’t move on your external display, you need to disable “above 4g decoding” in the motherboard’s BIOS.
In some environments it is necessary to segment the IOMMU Groups to be able to pass the GPU to the VM.
- Add the content
pcie_acs_override=downstream,multifunction pci=nommconfin the file/etc/default/grubat the end of the lineGRUB_CMDLINE_LINUX_DEFAULT; - After changing the grub file, run the command
update-gruband reboot your PVE.
🎥 Demonstration (in Portuguese)
📽️ Watch on YouTube
(Enable auto-translate captions for English subtitles!)
🎖 Credits
- OpenCore/Acidanthera Team - Open-source bootloader
- Corpnewt - Tools (ProperTree, GenSMBIOS, etc.)
- Apple - macOS
- Proxmox - Fantastic virtualization platform & documentation