The fix is in process:
https://lore.proxmox.com/pve-devel/20260310091141.814416-1-d.csapak@proxmox.com/T/#t
https://lore.proxmox.com/pve-devel/20260310091141.814416-1-d.csapak@proxmox.com/T/#m47eaa3b51d88a1ecbb4b21401c6ad834ec9aaaf4...
For now a downgrade of pvemanager to 9.0.12 was the solution. Apparently there is a single line change that invokes a JS feature implemented in Firefox 130+ (hence my ESR115 doesn't work).
ZFS over iSCSI in PVE is a specific scheme that implies:
a) There is an external storage device
b) You can login to this server via SSH as root (this excludes Dell, Netapp, Hitachi, etc)
c) There is internal storage in that server (HDD, SAS...
a SAN would be a shared device of some sort. when you say you have "two" SANs, do you mean you have two boxes serving independent iscsi luns, or two boxes in a failover capacity (meaning one set of luns?)
In either case, this becomes a simple...
You can switch to no-subscription repository, do apt update, install the desired kernel doing apt install proxmox-kernel-6.xx (input your kernel version here), then go back to enterprise repository and do apt update again. Make sure you only...
Like others already said, by default it reads everything.
The money quote line is this one:
107: 2026-02-28 21:00:07 INFO: scsi0: dirty-bitmap status: created new
Since the VM is not running and/or you have the stop backup mode, it can't make...
No. It is read completely, to seek and find modified chunks. Look at "write: 0 B/s" in every line ;-)
In a simplified nutshell: the source is read chunk by chunk. The chunk is hashed. That checksum is sent to the PBS. The PBS notices that a...
ARC is for a default installation on a PVE 9 with 32 GiB much lower. So the example is missing clear directions and could be phrased much better to be helpful.
I'll give you some options:
OPNSense
pfSense
VyOS
Proxmox!
A Debian box is quite capable of being a very decent router and you already have one: Proxmox. However, that is one for the likes of me to run up. What you probably need is something...
I'd recommend Opnsense. It fits all these requirements and it can be installed as a VM on Proxmox VE (just download the iso-vga installer) https://opnsense.org/
It's basically an open source firewall. Among other functions, you can create...
The resolving commit for mentioned vioscsi (and viostor) bug was merged 21 Jan 2026 into virtio master (commit cade4cb, corresponding tag mm315).
So if the to-be-released version will be tagged as >= mm315, the patch will be there.
As of me...
That sounds like a reasonable fix. A minor delay in handoff between the nodes in the interest of security is very much acceptable. I look forward to seeing it pushed out once you get it applied and tested. Thanks!
understandable, the only mitigation I can currently think of is by utilizing a hook script, but that won't catch every case in the guest lifecycle.
I'll look into creating patches that resolve this problem by making the guest wait for a firewall...
Interesting, I’d have also expected firewall rules to be applied the whole time.
Can access be controlled by a firewall outside Proxmox? At least for external connections… That’s our primary method though we use Proxmox firewall in a few cases...
Just an update. I have confirmed that I can exploit this to establish an SSH session with the guest by simply probing the ssh port every second. As soon as I migrate the VM to another node the session connects and I can use that session as long...
This is true in theory but not always possible. There is, for example, a well-known enterprise-grade backup software, who allows backing up MS SQL clusters, but doesn't support the backup of MySQL/MariaDB/Oracle or PostgreSQL clusters.
For this...
I would never solve those RPO/RTO demands with a recovery solution, I would always go with internal replication/standby solutions within the database. There is also a reason those techniques exist in those products for decades. So those should be...