Went through pve update today and had a message saying
Removable bootloader found at '/boot/efi/EFI/BOOT/BOOTX64.efi', but GRUB packages not set up to update it!
Run the following command:
echo 'grub-efi-amd64 grub2/force_efi_extra_removable boolean true' | debconf-set-selections -v -u
Then reinstall GRUB with 'apt install --reinstall grub-efi-amd64'
To anyone facing this message: don’t forget!
See here in the Proxmox forums
Well…yes, but you only but once in about 5-7 years I guess (maybe your device lasts even langer).
So - either you go with opnsense hardware or get a protectli I’d recommend. No love for cheap Chinese computers from my side here, you may want to be quite sure to have reliable hardware as your main firewall (if you do not want to cluster?).