How to declare a drive read-only for a vm?
- Thread starter skraw
- Start date
This is currently not possible. QEMU itself supports it, so technically you could add a drive, run
You can open a bug report in our bug tracker if you want: https://bugzilla.proxmox.com
qm showcmd VMID --pretty, and put the corresponding '-drive' and '-device' blocks (with 'read-only=on' added to '-drive') as 'args:' in your VM config (and remove drive options themselves), but this could potentially break any number of other storage related things, since PVE will no longer know that the drive is connected to your VM.You can open a bug report in our bug tracker if you want: https://bugzilla.proxmox.com
One would prefer an solution inside proxmox GUI of course. Fiddling with the file base isn't really that transparent in this case. I was pretty astonished though that libvirt/virt-manager supports this out-of-the-box (and it was often used in my environment) whereas here it isn't even something to think about ...
What I used often in kiosk systems was the immutable flag, that allows writes to the drive but it gets reset every time the machine boots up. Technically, this was done via a QCOW2 file overlay that stored the changes.
That's really not our use case. We use read-only drives often as backups where you can examine an older setup, and you must not be able to write anything there, even if it is thrown away afterwards. Else you cannot judge if the status is as it was when this snapshot was done.
If this is an requirement in Windows, you can use ZFS with snapshots and export them via Samba. This works perfectly and is integrated into the "file history" stuff in windows.
Hi skraw,
as @Stefan_R already said you are very welcome to open up a feature request on the bug tracker: https://bugzilla.proxmox.com or even send in a patch yourself.
as @Stefan_R already said you are very welcome to open up a feature request on the bug tracker: https://bugzilla.proxmox.com or even send in a patch yourself.
Well, easy-going to tell that. But if you already happen to follow quite a lot of the important projects there is not much spare time left. And honestly I would not start at this topic, but rather with
- why does a proxmox cluster node change its ssh keys on occasion (happened 3 times during the last weeks)
(no more migration possible then, first remove old key, re-login and answer "yes" to save new key)
- why does corosync not allow to change mtu in config during runtime, but pmtud is allowed to change it on the fly?
- why does a whole ha-group go in failure-state (vms running) sometimes?
(can only be cleared by deleting the group and re-adding vms to new group)
- the vms listed in the search tab show a relative percentage of RAM usage, but no absolute value (e.g. in GB).
(prevents recognising the top RAM users, additionally high percentage says absolutely nothing in a linux guest)
- why is the vm list to the left always id-sorted? Nobody outside the proxmox software cares about the id, its the _name_ you give a vm that you want to find.. (true for all lists btw)
- a combined load tab of all vms (load for every single vm) would be great. There one could see if some (or all) peak some time during the day/night and who's to blame, same for RAM usage.
- add your favourite problem here
- why does a proxmox cluster node change its ssh keys on occasion (happened 3 times during the last weeks)
(no more migration possible then, first remove old key, re-login and answer "yes" to save new key)
- why does corosync not allow to change mtu in config during runtime, but pmtud is allowed to change it on the fly?
- why does a whole ha-group go in failure-state (vms running) sometimes?
(can only be cleared by deleting the group and re-adding vms to new group)
- the vms listed in the search tab show a relative percentage of RAM usage, but no absolute value (e.g. in GB).
(prevents recognising the top RAM users, additionally high percentage says absolutely nothing in a linux guest)
- why is the vm list to the left always id-sorted? Nobody outside the proxmox software cares about the id, its the _name_ you give a vm that you want to find.. (true for all lists btw)
- a combined load tab of all vms (load for every single vm) would be great. There one could see if some (or all) peak some time during the day/night and who's to blame, same for RAM usage.
- add your favourite problem here
I didn't mean to urge you to submit a patch yourself, it was just a suggestion. A feature request would suffice and increase the probability that it lands in a future version of Proxmox. We also have limited resources, so we cannot keep track of feature requests in the forum, that's what the bugzilla is for.
Stay serious, please. You are already the second staff member that read this thread. And none of the two found it worth the time making a feature request for it. If that is an easy process, it should likely take just as long as answering in the thread - for you. For me on the other hand - since I am new here - everything takes at least double time. Still I am just evaluating the product and comparing to others. I am just telling what looks strange to me - or missing.
For that, a feature request exists, but is in a "wontfix" state:
https://bugzilla.proxmox.com/show_bug.cgi?id=1298
it is actually in a 'postponed' state as it would be nice to have, but not so easy to implement and nobody had time to do it yet
Sorry, I misunderstood you, you want to sort them by name. The thing is even more weird if you have containers and VMs, because they're sorted by type, then by id.