Server restarting? unknown reason at midnight

[Infotech@]

Good day all - new to Proxmox, so please be patient with me.

I did see a search result of someone else having this issue, resolved by updating the kernel, but this is two years later and a fresh install - updated in April.

I received an alert from our backup application that the server (host) was shut down during a backup operation.

The logs I see appear to indicate it was restarted at midnight, but I cannot see what caused this. If it is automation/patch, etc, then I must have control over when this happens as we are operational at midnight (at times).

My system log entries that make me think it's restarting:

May 07 00:00:07 PVE-2025 systemd[1]: Starting dpkg-db-backup.service - Daily dpkg database backup service...
May 07 00:00:07 PVE-2025 systemd[1]: Starting logrotate.service - Rotate log files...
May 07 00:00:07 PVE-2025 systemd[1]: dpkg-db-backup.service: Deactivated successfully.
May 07 00:00:07 PVE-2025 systemd[1]: Finished dpkg-db-backup.service - Daily dpkg database backup service.
May 07 00:00:07 PVE-2025 systemd[1]: Reloading pveproxy.service - PVE API Proxy Server...
May 07 00:00:07 PVE-2025 pveproxy[2050878]: send HUP to 1397
May 07 00:00:07 PVE-2025 pveproxy[1397]: received signal HUP
May 07 00:00:07 PVE-2025 pveproxy[1397]: server closing
May 07 00:00:07 PVE-2025 pveproxy[1397]: server shutdown (restart)
May 07 00:00:07 PVE-2025 systemd[1]: Reloaded pveproxy.service - PVE API Proxy Server.
May 07 00:00:07 PVE-2025 systemd[1]: Reloading spiceproxy.service - PVE SPICE Proxy Server...
May 07 00:00:07 PVE-2025 spiceproxy[2050880]: send HUP to 1403
May 07 00:00:07 PVE-2025 spiceproxy[1403]: received signal HUP
May 07 00:00:07 PVE-2025 spiceproxy[1403]: server closing
May 07 00:00:07 PVE-2025 spiceproxy[1403]: server shutdown (restart)
May 07 00:00:07 PVE-2025 systemd[1]: Reloaded spiceproxy.service - PVE SPICE Proxy Server.
May 07 00:00:07 PVE-2025 systemd[1]: Stopping pvefw-logger.service - Proxmox VE firewall logger...
May 07 00:00:07 PVE-2025 pvefw-logger[1725317]: received terminate request (signal)
May 07 00:00:07 PVE-2025 pvefw-logger[1725317]: stopping pvefw logger
May 07 00:00:08 PVE-2025 spiceproxy[1403]: restarting server
May 07 00:00:08 PVE-2025 spiceproxy[1403]: starting 1 worker(s)
May 07 00:00:08 PVE-2025 spiceproxy[1403]: worker 2050891 started
May 07 00:00:08 PVE-2025 systemd[1]: pvefw-logger.service: Deactivated successfully.
May 07 00:00:08 PVE-2025 systemd[1]: Stopped pvefw-logger.service - Proxmox VE firewall logger.
May 07 00:00:08 PVE-2025 systemd[1]: pvefw-logger.service: Consumed 4.871s CPU time.
May 07 00:00:08 PVE-2025 systemd[1]: Starting pvefw-logger.service - Proxmox VE firewall logger...
May 07 00:00:08 PVE-2025 pvefw-logger[2050894]: starting pvefw logger
May 07 00:00:08 PVE-2025 systemd[1]: Started pvefw-logger.service - Proxmox VE firewall logger.
May 07 00:00:08 PVE-2025 systemd[1]: logrotate.service: Deactivated successfully.
May 07 00:00:08 PVE-2025 systemd[1]: Finished logrotate.service - Rotate log files.
May 07 00:00:08 PVE-2025 pveproxy[1397]: restarting server
May 07 00:00:08 PVE-2025 pveproxy[1397]: starting 3 worker(s)
May 07 00:00:08 PVE-2025 pveproxy[1397]: worker 2050899 started
May 07 00:00:08 PVE-2025 pveproxy[1397]: worker 2050900 started
May 07 00:00:08 PVE-2025 pveproxy[1397]: worker 2050901 started
May 07 00:00:13 PVE-2025 spiceproxy[1725314]: worker exit
May 07 00:00:13 PVE-2025 spiceproxy[1403]: worker 1725314 finished
May 07 00:00:13 PVE-2025 pveproxy[1954197]: worker exit
May 07 00:00:13 PVE-2025 pveproxy[1955297]: worker exit
May 07 00:00:13 PVE-2025 pveproxy[1949295]: worker exit
May 07 00:00:13 PVE-2025 pveproxy[1397]: worker 1954197 finished
May 07 00:00:13 PVE-2025 pveproxy[1397]: worker 1955297 finished
May 07 00:00:13 PVE-2025 pveproxy[1397]: worker 1949295 finished

 

[UdoB]

May 07 00:00:07 PVE-2025 systemd[1]: Starting dpkg-db-backup.service - Daily dpkg database backup service...

That's already seven seconds after midnight ;-)

There might be a chance that it was triggered at 00:00:00, so the journal from 23:59:55 to 00:00:07 might have more information.

 

[Infotech@]

That's already seven seconds after midnight ;-)

There might be a chance that it was triggered at 00:00:00, so the journal from 23:59:55 to 00:00:07 might have more information.

That's fair!

10.255.255.172 is our VEEAM server.

May 06 23:56:24 PVE-2025 systemd[1]: Started session-35888.scope - Session 35888 of User root.
May 06 23:56:24 PVE-2025 sshd[2050068]: pam_env(sshd:session): deprecated reading of user environment enabled
May 06 23:56:24 PVE-2025 sshd[2050068]: Received disconnect from 10.255.255.172 port 52868:11: Connection terminated by the client.
May 06 23:56:24 PVE-2025 sshd[2050068]: Disconnected from user root 10.255.255.172 port 52868
May 06 23:56:24 PVE-2025 sshd[2050068]: pam_unix(sshd:session): session closed for user root
May 06 23:56:24 PVE-2025 systemd[1]: session-35888.scope: Deactivated successfully.
May 06 23:56:24 PVE-2025 systemd-logind[1031]: Session 35888 logged out. Waiting for processes to exit.
May 06 23:56:24 PVE-2025 systemd-logind[1031]: Removed session 35888.
May 06 23:57:24 PVE-2025 sshd[2050296]: Accepted password for root from 10.255.255.172 port 52932 ssh2
May 06 23:57:24 PVE-2025 sshd[2050296]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
May 06 23:57:24 PVE-2025 systemd-logind[1031]: New session 35889 of user root.
May 06 23:57:24 PVE-2025 systemd[1]: Started session-35889.scope - Session 35889 of User root.
May 06 23:57:24 PVE-2025 sshd[2050296]: pam_env(sshd:session): deprecated reading of user environment enabled
May 06 23:57:24 PVE-2025 sshd[2050296]: Received disconnect from 10.255.255.172 port 52932:11: Connection terminated by the client.
May 06 23:57:24 PVE-2025 sshd[2050296]: Disconnected from user root 10.255.255.172 port 52932
May 06 23:57:24 PVE-2025 sshd[2050296]: pam_unix(sshd:session): session closed for user root
May 06 23:57:24 PVE-2025 systemd[1]: session-35889.scope: Deactivated successfully.
May 06 23:57:24 PVE-2025 systemd-logind[1031]: Session 35889 logged out. Waiting for processes to exit.
May 06 23:57:24 PVE-2025 systemd-logind[1031]: Removed session 35889.
May 06 23:58:18 PVE-2025 smartd[1028]: Device: /dev/bus/0 [megaraid_disk_00] [SAT], SMART Usage Attribute: 194 Temperature_Celsius changed from 84 to 83
May 06 23:58:18 PVE-2025 smartd[1028]: Device: /dev/bus/0 [megaraid_disk_04] [SAT], SMART Usage Attribute: 190 Airflow_Temperature_Cel changed from 73 to 74
May 06 23:58:18 PVE-2025 smartd[1028]: Device: /dev/bus/0 [megaraid_disk_04] [SAT], SMART Usage Attribute: 194 Temperature_Celsius changed from 73 to 74
May 06 23:58:24 PVE-2025 sshd[2050504]: Accepted password for root from 10.255.255.172 port 53001 ssh2
May 06 23:58:24 PVE-2025 sshd[2050504]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
May 06 23:58:24 PVE-2025 systemd-logind[1031]: New session 35890 of user root.
May 06 23:58:24 PVE-2025 systemd[1]: Started session-35890.scope - Session 35890 of User root.
May 06 23:58:24 PVE-2025 sshd[2050504]: pam_env(sshd:session): deprecated reading of user environment enabled
May 06 23:58:24 PVE-2025 sshd[2050504]: Received disconnect from 10.255.255.172 port 53001:11: Connection terminated by the client.
May 06 23:58:24 PVE-2025 sshd[2050504]: Disconnected from user root 10.255.255.172 port 53001
May 06 23:58:24 PVE-2025 sshd[2050504]: pam_unix(sshd:session): session closed for user root
May 06 23:58:24 PVE-2025 systemd[1]: session-35890.scope: Deactivated successfully.
May 06 23:58:24 PVE-2025 systemd-logind[1031]: Session 35890 logged out. Waiting for processes to exit.
May 06 23:58:24 PVE-2025 systemd-logind[1031]: Removed session 35890.
May 06 23:59:25 PVE-2025 sshd[2050711]: Accepted password for root from 10.255.255.172 port 53074 ssh2
May 06 23:59:25 PVE-2025 sshd[2050711]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
May 06 23:59:25 PVE-2025 systemd-logind[1031]: New session 35891 of user root.
May 06 23:59:25 PVE-2025 systemd[1]: Started session-35891.scope - Session 35891 of User root.
May 06 23:59:25 PVE-2025 sshd[2050711]: pam_env(sshd:session): deprecated reading of user environment enabled
May 06 23:59:25 PVE-2025 sshd[2050711]: Received disconnect from 10.255.255.172 port 53074:11: Connection terminated by the client.
May 06 23:59:25 PVE-2025 sshd[2050711]: Disconnected from user root 10.255.255.172 port 53074
May 06 23:59:25 PVE-2025 sshd[2050711]: pam_unix(sshd:session): session closed for user root
May 06 23:59:25 PVE-2025 systemd[1]: session-35891.scope: Deactivated successfully.
May 06 23:59:25 PVE-2025 systemd-logind[1031]: Session 35891 logged out. Waiting for processes to exit.
May 06 23:59:25 PVE-2025 systemd-logind[1031]: Removed session 35891.