Could PVE migrate vm without 'root' accout

[eric.chan]

Hi All,

I have a question about pve vm migration.
As my company have to take security hardening control on the PVE host. The PermitRootLogin setting in file '/etc/ssh/sshd_config' must set to 'no'.
By defafult, when pve doing vm migration, the root account will ssh to the target pve host then execute the copy action to finish migration job. Once I set 'no' to PermitRootLogin, the vm migration will go to faiure.
So is it some other ways to finish vm migration job with root account? And is there some guide or procedure to handle it ?

Thank you.

 

[aaron]

This has been discussed a few times already, a Proxmox VE cluster needs to be able to use SSH with the root user between the nodes. Therefore, the most that you can do is to set it to prohibit-password.
Live migration is one of the use cases as you experienced.