[SOLVED] Errors migrating VMs and connecting to shell after network changes

S

samumsq

New Member
Aug 27, 2025
11
1
3
Hi everyone,

A few months ago we changed our proxmox networks in order to duplicate corosync network and separate migration and ssh connections from corosync network.
After the change we had to connect to each proxmox node and use this command ssh-copy-id root@"new_ip" to allow migrations and shell connections.
We had to do this because we had this error
root@"new_ip": Permission denied (publickey,password).
TASK ERROR: command '/usr/bin/ssh -e none -o 'BatchMode=yes' -o 'HostKeyAlias=pve06-boa' -o 'UserKnownHostsFile=/etc/pve/nodes/pve06-boa/ssh_known_hosts' -o 'GlobalKnownHostsFile=none' root@"new_ip" pvecm mtunnel -migration_network 11.0.0.1/28 -get_migration_ip' failed: exit code 255

After using the command ssh-copy-id root@"new_ip" everything works for a few weeks, but after that randomly some nodes lost connection again and i have to connect and use the command to solve it.

I would like to know if there's something else we have to do to solve this error. Is there any proxmox command we have to execute?

Thanks in advance for your time and help
 
Hi Magnus,

Thanks for your reply but i think it's not related to my issue.

Searching through /etc/pve/nodes I've seen that in every node there's a file named ssh_known_hosts that only has in it the same host, but not the others
Checking in /root/.ssh/known_host i can see all the other hosts but not in /etc/pve/nodes/nodeX/ssh_known_hosts

Should i add all the keys from the hosts in /etc/pve/nodes/nodeX/ssh_known_hosts? Can i add them with a proxmox command or just copy/paste from /root/.ssh/known_host?

Thanks again for your time and help
 
Hi again,

A few weeks ago i used this commands in every node
pvecm updatecerts -f
systemctl restart pvedaemon pveproxy

After that it seems that everythings seems to work fine. No errors with ssh connections or migration tasks

Thanks again Magnus for your help
Hope this can help
 
You must log in or register to reply here.
Top Bottom