PAM user (with full admin access), but not access to repository updates?

[Skyrider]

Greetings.

As of a long time, I noticed that only root user has access to update the system on the main node. Even though I created a user with full admin access the 'upgrade' option is gray, and only refresh is available. Any reason as to why this is?

 

[Neobin]

There is an older, still open feature request for it:
https://bugzilla.proxmox.com/show_bug.cgi?id=1856

In the meantime:
https://forum.proxmox.com/threads/system-updates-with-non-root-user.45876/#post-217956

 

[Skyrider]

That's a bit silly, especially when root should not be enabled on a permanent basis for security reasons.

 

[Dunuin]

You still need root, as stuff like cluster joining is hardcoded to root for security reasons.

 

[Neobin]

That's a bit silly, especially when root should not be enabled on a permanent basis for security reasons.

The following seems to be still the current state for this topic (disable root):
https://forum.proxmox.com/threads/disable-root-account.83967/#post-369097

 

[fabian]

you can always run the update in a shell over SSH (ideally with screen/tmux/..) with any user that has permissions to do so (e.g., via sudo/pkexec/..). note that apt needs to run with effective root privileges in any case, however you get there