Search results

  1. M

    ACL for Bulk Migrate

    Hello, I'd like to authorize some of our users to bulk migrate theirs VMs, but I can't find the appropriate ACLs ! Regarding to the code (/usr/share/perl5/PVE/API2/Nodes.pm) it seems that migrateall is tided to check VM.migrate on / but even with this authorization, it seems not to be...
  2. M

    ACL on firewall

    Hello, is there any way to put ACL on the datacenter firewall ? My goal is to permit the audit of security groups, ipset and alias. Maybe the management of ipset and alias. An alternative could be the possibility to handle ipset /alias /secgroups by pools.
  3. M

    Hook script and VM configuration

    Hi, We are setting up a brand new PVE instance dedicated to our firewalls stacks. All those FWs rely on VFs for there network interfaces. The old solution was based on libvirt, and VFs could be dynamically attributed to VMs. To mimick this behaviour I've setup an pre-start hook script that get...
  4. M

    Sequential backup for VMs/CTs

    We are trying to backup our whole cluster to a PBS server. This was working quite well, but since last 2 months, some backup started to failed ( qemu guest agent timeout, qmp command timeout ....), It seems that for an known reason, the storage below the PBS datastore that is not fast enough...
  5. M

    Using raw iptables rules

    Hi, Is there any way to use raw iptables rules for the VM ? We are doing mass migration to PVE and for some of our VM we have some "special" rules that are not supported by the pve firewall. For most of the VM we translate iptable to pve-firewall and it's working as intended but we still...