Proxmox VE 4.0 beta 1 and external VNC

[Erk]

I am getting an error when I try and use the same args, that I use successfully for proxmox 3.4 conf files, in the new 4.0 beta 1

eg.

args: -vnc 0.0.0.0:1,ABC123

Gives an error:

Running as unit 101.scope.
kvm: -vnc 0.0.0.0:1,ABC123: Invalid parameter 'ABC123'

So the VM wont start up unless I remove the password from the line, which of course is not secure.

Anyone got external VNC with a password working with the 4.0 beta 1 yet?

 

[t.lamprecht]

That's because you're using an invalid vnc option string, or at least deprecated for the new QEMU. The -vnc parameter doesn't supports to define the password itself anymore, and that's good.

To quote the manual page from kvm:

password
Require that password based authentication is used for client connections.

The password must be set separately using the "set_password" command in the pcsys_monitor. The syntax to change your password is:
"set_password <protocol> <password>" where <protocol> could be either "vnc" or "spice".

use

-vnc 0.0.0.0:1,password=on
# or this should work also:
-vnc 0.0.0.0:1,password

For setting the password enter the following command in the qemu monitor (use the monitor tab in the interface or "qm monitor <vmid>" in the shell)

set_password vnc test_password

 

[Erk]

That's because you're using an invalid vnc option string. the -vnc parameter doesn't supports to define the password itself, and that's good.

It does in proxmox 3.4 I have been using passwords in the conf for years without error.

This is the proxmox wiki page on the syntax I use.

https://pve.proxmox.com/wiki/Vnc_2.0

 

[t.lamprecht]

You were faster than my edits. It seems it got deprecated between qemu 2.2 (used in PVE 3.4) and qemu 2.4 (used in pve 4.0beta).

Generally it's better to not use plaintext passwords in arguments, every one can see them (for example also a normal user through starting htop).

 

[t.lamprecht]

https://pve.proxmox.com/wiki/Vnc_2....d_vnc_clients_.28Including_iOS_and_Android.29

There, the guide you said you have followed is already correct.

 

[Erk]

You were faster than my edits. It seems it got deprecated between qemu 2.2 (used in PVE 3.4) and qemu 2.4 (used in pve 4.0beta).

Generally it's better to not use plaintext passwords in arguments, every one can see them (for example also a normal user through starting htop).

Ah I see, thanks for noticing that.
I have to use external VNC because the noVNC console never seems to work on my Mac and Firefox.