Alow additonal user to use vzctl enter

[jgf]

Proxmox system set up and running with no problem. root has access to everything, via web interface and also via SSH login to host.

To enhance security, I wanted to add another user with root equivalence.

I have added an additional user via web that has administrator rights to everything, and that works fine. Problem is if I want to log in via ssh to host user does not exist. If I go and add a user to host with group root, I can log in to host via ssh. Changed default path for the user so it can find vzctl. Now when I try to execute "vzctl enter 100", I get "Unable to open /etc/pve/openvz/100.conf: Permission Denied".

Obviously there is a disconnect between users added via ProxMox web console and actual host which I am not understanding.

Basically as the system is on the internet I would prefer ssh login limited to a specific random user ID (NOT root). I cannot find any posts relating to this. Any advice?

Many thanks.

 

[dietmar]

Only root user is allowed to use vzctl or other VM related tools.

You can add other users, but you need to use the GUI or the API to manage VMs - you can do that from ssh.

 

[lp86]

You could use the sudo command and the sudoers file to allow other users to run vzctl, but they would be able to use the entire command, vzctl destroy for example.