Recent content by cwoelkers

That was correct. However testing it today gives no invalid privilege warnings for any pve command. I can only guess that running pveum acl delete / --roles VM.Monitor -user root@pam actually fixed the issue even with the ACL update failed: role 'VM.Monitor' does not exist output. I'll mark...

That tracks but this is for the existing users/roles.

No permissions were listed for the root@pam user in /etc/pve/user.cfg.

To start I am aware that the VM.Monitor permission was deprecated and then removed with the release of version 9.0. I did not remove it at the time as it seemed unimportant, and it still is. That said it has now become an annoyance. When I am logged into the root console, usually via ssh, and...

This was solved by two changes, a different SPICE client and moving the VM from one of my hypervisors to another. The different client, a freshly compiled version of virt-viewer, did the most by actually connecting when Remmina would not but the VM still gave a poor user experience. So I...

I am attempting to set up Windows 11 Enterprise 24H2, with all the latest updates, as a guest on Proxmox 8.4.11. I want Windows to make use of SPICE for USB redirection from the remote client, specifically for Yubikey usage. I have gotten Windows installed and running by following the Windows 11...

I'm starting to play around with the Proxmox firewall in the web GUI, and after enabling it with no rules which locked me out of the GUI and then disabling the firewall via my KVM, I have started adding rules at the datacenter level for all of the various Proxmox services before I enable it...

I have an internal vnet with systems that needed access to the Internet. With the newer proxmox-firewall I was able to create a new table with the necessary rules and save the changes to /etc/nftables.conf but the rules are not loaded at boot. The documentation says this on custom rules: "If you...

I know it's been a bit since you first posted this but I had to do the same thing you do and here are the configuration lines I added to /etc/nftables.conf to do so. table inet nat { chain prerouting { type nat hook prerouting priority dstnat; policy accept; } chain...

I do have a cluster and have defined a separate network interface for corosync to handle that traffic which exists on our management VLAN(not VLAN 1). As I wanted access to the web interface on that VLAN I needed to add the interface's IP address to the SSL cert before everything worked.

I figured it out. The certs I generated initially did not have the cluster interface IP defined as a Subject Alternative Name, just the main IP and the hostname. Once I added it everything worked fine.

Funny, I am also a Chris. Guess we really are everywhere. Anyways... The root certificate is valid through 2025 so no worries there. I installed the certificate using the web GUI by under System > Certificates for each host using the "Upload Custom Certificate" button. Here is the requested...

I'm running a cluster of four Proxmox community servers, Proxmox 7.3-3 on Debian 11, in a cluster. I was getting tired of the SSL warnings from the self-signed certificate so created a CSR on each and signed them on my local CA server, I'm aware of ACME but did not want to use an external...

Thank you for posting this. I would make one change in leaving the restart button available. Even if you accidentally hit it, and then blindly click through the affirmation, then at least the system will only reboot. That said these buttons should be removable via an option. SSH, KVM, and...

I admin a four node cluster that has recently been upgraded from Debian Stretch, and Proxmox 5.x, to Debian Buster and Proxmox 6.x. The latest updates are installed on all nodes. After upgrading the cluster I moved my focus to the LXC containers and QEMU virtual machines. The VMs had no issues...