Proxmox Datacenter Manager 1.0 (stable)

t.lamprecht

t.lamprecht

Proxmox Staff Member
Staff member
Jul 28, 2015
6,769
4,829
315
South Tyrol/Italy
shop.proxmox.com
We're very excited to present the first stable release of our new Proxmox Datacenter Manager!

Proxmox Datacenter Manager is an open-source, centralized management solution to oversee and manage multiple, independent Proxmox-based environments. It provides an aggregated view of all your connected nodes and clusters and is designed to manage complex and distributed infrastructures, from local installations to globally scaled data centers. With multi-cluster management it enables management like live migrations of virtual guests without any cluster network requirements.

The project is fully developed in the Rust programming language, from the backend API server to the CLI tools to a completely new frontend. The frontend is built on the new widget toolkit that we developed over the last few years. This offers a more modern web user interface experience, not only in terms of appearance and functionality, but also in terms of accessibility, speed, and compatibility. Proxmox Datacenter Manager is licensed under the GNU Affero General Public License v3 (GNU AGPLv3).

A big THANK YOU to our global community for the substantial support during the beta phase! We are particularly grateful for the stress tests performed, the detailed bug reports, and contributions of other kinds - thank you so much, your collaboration is fantastic!

Main Features:
  • Based on Debian Trixie 13.2, with latest security updates
  • Linux kernel based on version 6.17 with ZFS 2.3.4 included
  • Authentication: support for LDAP, Active Directory and OpenID Connect realms for authentication
  • Custom views for tailored overviews filtered by remotes, resources, resource type, or tags and dedicated access control
  • Support for Proxmox Virtual Environment and Proxmox Backup Server remotes
  • Efficient central metric collection
  • Powerful search functionality to quickly find resources (filtered by resource type, status, or more).
  • Privilege Management for Proxmox Datacenter Manager users from the access control UI
  • Centralized system update overview
  • Initial Software-Defined Networking integration with EVPN configuration between clusters
  • Centralized update overview
  • Enterprise-support available for existing customers with active Basic or higher subscriptions for their Proxmox remotes
  • Open-source license: GNU AGPLv3

Release notes
https://pdm.proxmox.com/docs/roadmap.html#proxmox-datacenter-manager-1-0

Press release
https://www.proxmox.com/en/about/company-details/press-releases/proxmox-datacenter-manager-1-0

Download
https://www.proxmox.com/en/downloads
Alternate ISO download:
https://enterprise.proxmox.com/iso

Documentation
https://pdm.proxmox.com/docs/

Community Forum
https://forum.proxmox.com

Bugtracker
https://bugzilla.proxmox.com

Source code
https://git.proxmox.com

This latest release features enhancements and updates shaped by your ideas and support. A huge thank you to all of our community members and customers reporting bugs, submitting patches and getting involved in testing - THANK YOU!


FAQ
Q: How does this integrate into Proxmox Virtual Environment and Proxmox Backup Server?
A: You can add arbitrary Proxmox hosts or clusters as remotes. Proxmox Datacenter Manager will then monitor them and provide basic management using only the API.

Q: How many different Proxmox VE hosts and/or cluster can I manage with a single Datacenter Manager instance?
A: Due to the early stage of development, there are still some pain points, but we are confident that we will be able to handle large setups with a moderate amount of resources. We have run tests with over 5000 remotes and over 10000 virtual guests to confirm the performance expectations of our new UI framework. We are targeting similar numbers for the backend.

Q: What Proxmox VE and Proxmox Backup Server versions are supported?
A: The minimum required Proxmox VE version is 8.4 and the minimum required Proxmox Backup Server version is 3.4.
We will support all actively supported Proxmox project releases, but encourage frequent upgrades of both PDM and the PVE and PBS remotes to leverage all features.

Q: Can I upgrade a beta installation to the stable 1.0 via apt?
A: A: Yes, upgrading from is possible via apt and GUI. We recommend using the pdm-enterprise repository on upgrade for the most stable experience.

Q: Can I upgrade Proxmox Datacenter Manager Alpha to this 1.0 version?
A: Yes, please follow the upgrade instructions on https://pve.proxmox.com/wiki/Proxmox_Datacenter_Manager_Upgrade_from_Alpha_to_1

Q: Can I install Proxmox Datacenter Manager alongside with Proxmox VE or Proxmox Backup Server?
A: Yes, but installing alongside other Proxmox projects is not the recommended setup (expert use only).

Q: What environment does Proxmox Datacenter Manager support?
A: Proxmox Datacenter Manager will work everywhere where a standard x86-64/AMD64 Debian system is supported.

Q: Is there any recommended system requirements for the Proxmox Datacenter Manager?
A: Yes, see https://pdm.proxmox.com/docs/installation.html#system-requirements.

Q: What network setups are supported between Proxmox Datacenter Manager and remotes?
A: In general the Proxmox Datacenter Manager needs to be able to connect to all Proxmox VE remotes directly to send API requests and query load and usage metrics. Remotes on the other hand do not need to be able to connect to Datacenter Manager directly. Reverse proxies between Proxmox Datacenter Manager and any of its Proxmox VE remotes are not supported, we recommend using tunneling (for example, WireGuard or OpenVPN) for hosts that must not be exposed directly to a non-private network.

Q: Where can I get more information about feature updates?
A: Check the roadmap, forum, the mailing list, and/or subscribe to our newsletter.
 
  • Like
Reactions: gurubert, binaryanomaly, christophe and 33 others
Thanks for the great work! Updating PDM suddenly insists on installing the proxmox-default-kernel (which fails in my unprivileged container). Is there a way to prevent that (like there is for PBS) when running it in a container?

EDIT: apt-mark hold proxmox-default-kernel appears to help but might also prevent updates?

EDIT2: proxmox-datacenter-manager-admin versions reports: proxmox-datacenter-manager 1.0.0 running version: 1.0.0. But pdmAtoB complains: FAIL: 'proxmox-datacenter-manager' package is too old, please upgrade to >= 0.1.11.
 
Last edited:
  • Like
Reactions: thiagotgc
leesteken said:
Thanks for the great work! Updating PDM suddenly insists on installing the proxmox-default-kernel (which fails in my unprivileged container). Is there a way to prevent that (like there is for PBS) when running it in a container?

EDIT: apt-mark hold proxmox-default-kernel appears to help but might also prevent updates?

EDIT2: proxmox-datacenter-manager-admin versions reports: proxmox-datacenter-manager 1.0.0 running version: 1.0.0. But pdmAtoB complains: FAIL: 'proxmox-datacenter-manager' package is too old, please upgrade to >= 0.1.11.
Click to expand...

Same issue
 
Are you crazy? Why is it cost free? Clever to chain PDM to other licences but despite it you should give it a price tag like 500€. Why? Noone wanna hear the reaction that your enterprise do not have the resources to implement function A or function B.
And answer yourself: Will you extend the function pool of PDM. Will you have more efford to maintain a new product? See floh8 bugzilla suggestion to integrate kubernetes support in PDM. You need more men power.
And men power one get fastly with a high salary. There are a lot important functions still missing in the PVE storage GUI like nvme-over-tcp or zfs-over-nvme, for example. You need money.
 
Last edited:
I don't trust myself with a CT, because then I have to configure everything. I just wanted to install the image in a VM.
 
Trying to get my head around the licensing of this and who it's available for...

I see references in the docs that you need basic or higher, but I also see that it says it's available in the enterprise repo - which is accessible to paid community subscribers too..right?

Is there a typo somewhere, or am I missing something?
 
TheDragon said:
I see references in the docs that you need basic or higher, but I also see that it says it's available in the enterprise repo - which is accessible to paid community subscribers too..right?
Click to expand...
The license as with most of our products is AGPL so you can use PDM by yourself free of cost as you see fit. If you want to have proper enterprise subscription support and access to the Proxmox Datacenter Manager enterprise repository, at least 80% of all connected remotes need to have an enterprise subscription [1].

[1]: https://pdm.proxmox.com/docs/faq.ht...xmox-datacenter-manager-enterprise-repository
 
  • Like
Reactions: ebiss, Kingneutron, TheDragon and 1 other person
Great work :) One thing which bothers me: I'm missing documentation on best practices for security and permissions I need to give the API tokens used for the PVE and PBS remotes. Let's say I'm running the datacenter manager and have full admin permissions to the PVE and PBS remotes, then an attacker could take over the PDM instance and also use this to get access to the PVE and PBS infrastructure. Now taking over PVE is not the big deal in my book (yes it might happen, but on the other hand the whole point of the PDM is to have an unified interface for administration so that's a risc I'm willing to accept). Taking over the backups though would be a big deal, especially if one would also add a remote PBS used for offsite backups. On the other hand I can imagine that an limited access to a PBS server from the PDM might still be useful e.g. to restore backups without being able to run updates or open a remote shell. Did I miss something or is this not covered yet in the manual?
 
  • Like
Reactions: stncttr908 and floh8
sterzy said:
The license as with most of our products is AGPL so you can use PDM by yourself free of cost as you see fit. If you want to have proper enterprise subscription support and access to the Proxmox Datacenter Manager enterprise repository, at least 80% of all connected remotes need to have an enterprise subscription [1].

[1]: https://pdm.proxmox.com/docs/faq.ht...xmox-datacenter-manager-enterprise-repository
Click to expand...
Ok so this is a volume based licensed product now. Anyone can run it in free mode, but the enterprise repo access is keyed to how many of your connected nodes are enterprise enabled. This is pretty amazing IMHO.
 
  • Like
Reactions: herzkerl, Johannes S and Kingneutron
Johannes S said:
Great work :) One thing which bothers me: I'm missing documentation on best practices for security and permissions I need to give the API tokens used for the PVE and PBS remotes. Let's say I'm running the datacenter manager and have full admin permissions to the PVE and PBS remotes, then an attacker could take over the PDM instance and also use this to get access to the PVE and PBS infrastructure. Now taking over PVE is not the big deal in my book (yes it might happen, but on the other hand the whole point of the PDM is to have an unified interface for administration so that's a risc I'm willing to accept). Taking over the backups though would be a big deal, especially if one would also add a remote PBS used for offsite backups. On the other hand I can imagine that an limited access to a PBS server from the PDM might still be useful e.g. to restore backups without being able to run updates or open a remote shell. Did I miss something or is this not covered yet in the manual?
Click to expand...
I think that's definitively an important topic. The PDM is certainly a "lucrative" target due to being a single point of entry to one's whole Proxmox infrastructure, that's actually a big reason for it's a pull based design, i.e., the PDM can be hosted on a secure private location because it will connect to the PVE and PBS hosts, not vice versa. Some how-tos for better practice make sense to have in the midterm, for now I'd recommend blocking all incoming traffic to the PDM that isn't really necessary, using client-side encrypted backups of the PDM host to avoid that access to backups gives access to anything else and potentially also think about using a secure VPN to access remotes through a insecure network (e.g., WireGuard). Making that all a bit more convenient to set up is one of the goals for the midterm though.
 
  • Like
Reactions: herzkerl, readyspace and Johannes S
You must log in or register to reply here.
Top Bottom