Migrate Fail on PDM
- Thread starter debian10
- Start date
PDM 1.0.1 all nodes V9.1.2
I got somthing similar.
I have s cluster with 4 nodes and a seperate one single node.
When i try migrate CT from cluster node to single node it transfers disk but fails at the end. With this error:
2025-12-08 14:12:28 start final cleanup
2025-12-08 14:12:28 start container on source node
2025-12-08 14:12:30 ERROR: migration aborted (duration 00:01:05): error - tunnel command '{"conf":"#<div align='center'>\n# <a href='https://helper-scripts.com' target='_blank' rel='noopener noreferrer'>\n# <img src='https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/images/logo-81x112.png' alt='Logo' style='width%3A81px;height%3A112px;'/>\n# </a>\n#\n# <h2 style='font-size%3A 24px; margin%3A 20px 0;'>Wordpress LXC</h2>\n#\n# <p style='margin%3A 16px 0;'>\n# <a href='https://ko-fi.com/community_scripts' target='_blank' rel='noopener noreferrer'>\n# <img src='https://img.shields.io/badge/☕-Buy us a coffee-blue' alt='spend Coffee' />\n# </a>\n# </p>\n#\n# <span style='margin%3A 0 10px;'>\n# <i class=\"fa fa-github fa-fw\" style=\"color%3A #f5f5f5;\"></i>\n# <a href='https://github.com/community-scripts/ProxmoxVE' target='_blank' rel='noopener noreferrer' style='text-decoration%3A none; color%3A #00617f;'>GitHub</a>\n# </span>\n# <span style='margin%3A 0 10px;'>\n# <i class=\"fa fa-comments fa-fw\" style=\"color%3A #f5f5f5;\"></i>\n# <a href='https://github.com/community-scripts/ProxmoxVE/discussions' target='_blank' rel='noopener noreferrer' style='text-decoration%3A none; color%3A #00617f;'>Discussions</a>\n# </span>\n# <span style='margin%3A 0 10px;'>\n# <i class=\"fa fa-exclamation-circle fa-fw\" style=\"color%3A #f5f5f5;\"></i>\n# <a href='https://github.com/community-scripts/ProxmoxVE/issues' target='_blank' rel='noopener noreferrer' style='text-decoration%3A none; color%3A #00617f;'>Issues</a>\n# </span>\n#</div>\narch: amd64\ncores: 2\nfeatures: keyctl=1,nesting=1\nhostname: wordpress\nlock: migrate\nmemory: 2048\nnet0: name=eth0,bridge=vmbr0,hwaddr=BC:24:11:08:E0:0C,ip=dhcp,type=veth\nonboot: 0\nostype: debian\nrootfs: local-lvm:vm-103-disk-0,size=5G\nswap: 512\ntags: blog;cms\nunprivileged: 1\n","firewall-config":null,"cmd":"config"}' failed - failed to handle 'config' command - 403 Permission check failed (changing feature flags (except nesting) is only allowed for root@pam)TASK ERROR: migration aborted
If I create a CT on the single node and migrate to cluster node TASK OK.
When i migrate the same CT back from cluster node to single node TASK OK
OK when removed the "keyctl=1" in CT option->features . TASK OK Super
I got somthing similar.
I have s cluster with 4 nodes and a seperate one single node.
When i try migrate CT from cluster node to single node it transfers disk but fails at the end. With this error:
2025-12-08 14:12:28 start final cleanup
2025-12-08 14:12:28 start container on source node
2025-12-08 14:12:30 ERROR: migration aborted (duration 00:01:05): error - tunnel command '{"conf":"#<div align='center'>\n# <a href='https://helper-scripts.com' target='_blank' rel='noopener noreferrer'>\n# <img src='https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/images/logo-81x112.png' alt='Logo' style='width%3A81px;height%3A112px;'/>\n# </a>\n#\n# <h2 style='font-size%3A 24px; margin%3A 20px 0;'>Wordpress LXC</h2>\n#\n# <p style='margin%3A 16px 0;'>\n# <a href='https://ko-fi.com/community_scripts' target='_blank' rel='noopener noreferrer'>\n# <img src='https://img.shields.io/badge/☕-Buy us a coffee-blue' alt='spend Coffee' />\n# </a>\n# </p>\n#\n# <span style='margin%3A 0 10px;'>\n# <i class=\"fa fa-github fa-fw\" style=\"color%3A #f5f5f5;\"></i>\n# <a href='https://github.com/community-scripts/ProxmoxVE' target='_blank' rel='noopener noreferrer' style='text-decoration%3A none; color%3A #00617f;'>GitHub</a>\n# </span>\n# <span style='margin%3A 0 10px;'>\n# <i class=\"fa fa-comments fa-fw\" style=\"color%3A #f5f5f5;\"></i>\n# <a href='https://github.com/community-scripts/ProxmoxVE/discussions' target='_blank' rel='noopener noreferrer' style='text-decoration%3A none; color%3A #00617f;'>Discussions</a>\n# </span>\n# <span style='margin%3A 0 10px;'>\n# <i class=\"fa fa-exclamation-circle fa-fw\" style=\"color%3A #f5f5f5;\"></i>\n# <a href='https://github.com/community-scripts/ProxmoxVE/issues' target='_blank' rel='noopener noreferrer' style='text-decoration%3A none; color%3A #00617f;'>Issues</a>\n# </span>\n#</div>\narch: amd64\ncores: 2\nfeatures: keyctl=1,nesting=1\nhostname: wordpress\nlock: migrate\nmemory: 2048\nnet0: name=eth0,bridge=vmbr0,hwaddr=BC:24:11:08:E0:0C,ip=dhcp,type=veth\nonboot: 0\nostype: debian\nrootfs: local-lvm:vm-103-disk-0,size=5G\nswap: 512\ntags: blog;cms\nunprivileged: 1\n","firewall-config":null,"cmd":"config"}' failed - failed to handle 'config' command - 403 Permission check failed (changing feature flags (except nesting) is only allowed for root@pam)TASK ERROR: migration aborted
If I create a CT on the single node and migrate to cluster node TASK OK.
When i migrate the same CT back from cluster node to single node TASK OK
OK when removed the "keyctl=1" in CT option->features . TASK OK Super
Last edited:
yes, guests using root-only features cannot be migrated to another cluster at the moment, because the remote migration uses a token that cannot have full root privileges.
see https://bugzilla.proxmox.com/show_bug.cgi?id=2582 and https://bugzilla.proxmox.com/show_bug.cgi?id=6213
see https://bugzilla.proxmox.com/show_bug.cgi?id=2582 and https://bugzilla.proxmox.com/show_bug.cgi?id=6213
