Several questions about POM - Proxmox offline mirror

ghandalf

New Member
Mar 26, 2025
9
2
3
Hello,

I have installed a POM and added a POM subscription and PVE subscriptions, which has been working well.
I'm also syncing several repositories, all setup via proxmox-offline-mirror setup -> works also perfectly fine.
This is my config:
Code:
cat /etc/proxmox-offline-mirror.cfg
subscription: pom-aaa
    info aaa
    server-id aaa

subscription: pve1s-aaa
    info aaa
    server-id aaa
...

mirror: debian_trixie_main
    architectures amd64
    architectures all
    base-dir /var/lib/proxmox-offline-mirror/mirrors/
    ignore-errors false
    key-path /usr/share/keyrings/debian-archive-trixie-stable.pgp
    repository deb https://debian.anexia.at/debian trixie main contrib non-free-firmware
    skip-sections debug
    skip-sections games
    sync true
    verify true

mirror: pve_trixie_enterprise
    architectures amd64
    architectures all
    base-dir /var/lib/proxmox-offline-mirror/mirrors/
    ignore-errors false
    key-path /usr/share/keyrings/proxmox-release-trixie.gpg
    repository deb https://enterprise.proxmox.com/debian/pve trixie pve-enterprise
    sync true
    use-subscription pve
    verify true

mirror: debian_trixie_security
    architectures amd64
    architectures all
    base-dir /var/lib/proxmox-offline-mirror/mirrors/
    ignore-errors false
    key-path /usr/share/keyrings/debian-archive-trixie-security-automatic.pgp
    repository deb https://debian.anexia.at/debian-security trixie-security main contrib non-free-firmware
    skip-sections debug
    skip-sections games
    sync true
    verify true

mirror: debian_trixie_updates
    architectures amd64
    architectures all
    base-dir /var/lib/proxmox-offline-mirror/mirrors/
    ignore-errors false
    key-path /usr/share/keyrings/debian-archive-trixie-automatic.pgp
    repository deb https://debian.anexia.at/debian trixie-updates main contrib non-free-firmware
    skip-sections debug
    skip-sections games
    sync true
    verify true

medium: pve_trixie_enterprise_medium
    mirrors ""                                                      <- doesn't work!
    mountpoint /pom-mirror/test/
    sync true
    verify true

mirror: ceph_squid_trixie
    architectures amd64
    architectures all
    base-dir /var/lib/proxmox-offline-mirror/mirrors/
    ignore-errors false
    key-path /usr/share/keyrings/proxmox-release-trixie.gpg
    repository deb https://enterprise.proxmox.com/debian/ceph-squid trixie enterprise
    sync true
    use-subscription pve
    verify true

mirror: pve_trixie_no-subscription
    architectures amd64
    architectures all
    base-dir /var/lib/proxmox-offline-mirror/mirrors/
    ignore-errors false
    key-path /usr/share/keyrings/proxmox-release-trixie.gpg
    repository deb http://download.proxmox.com/debian/pve trixie pve-no-subscription
    sync true
    verify true

mirror: ceph_squid_trixie_no_sub
    architectures amd64
    architectures all
    base-dir /var/lib/proxmox-offline-mirror/mirrors/
    ignore-errors false
    key-path /usr/share/keyrings/proxmox-release-trixie.gpg
    repository deb http://download.proxmox.com/debian/ceph-squid trixie no-subscription
    sync true
    verify true

Our Proxmox systems are not able to access the internet, but can access the POM VM via HTTP, that's why I have installed nginx and have setup a simple vhost:
Code:
cat /etc/nginx/sites-enabled/repo
server {
    listen       80;
    server_name  default_server;

    location / {
    root        /var/lib/proxmox-offline-mirror/mirrors ;

    autoindex on;
    allow all;
    }
    location = /favicon.ico {
    log_not_found off;
    access_log off;
    }
}


Now my questions:
  • Do I need to create mediums for all the mirrors configured?
    • At the moment, I use nginx directly on the mirrors and this is also working great
    • Using mediums for this would in my opinion use double the space as I don't know, if there are also hard links used
  • I want to do daily / weekly mirror updates and then create sym-links to those timestamp directories -> will this work without issues?
    • At the moment, I'm already using a sym-link, which I use in my repo files on the nodes:
    • Code:
      ll /var/lib/proxmox-offline-mirror/mirrors/debian_trixie_*
      /var/lib/proxmox-offline-mirror/mirrors/debian_trixie_main:
      total 6
      drwxr-xr-x  6 root root  7 Nov 10 14:54 .
      drwxr-xr-x 10 root root 10 Nov 10 08:37 ..
      drwxr-xr-x  4 root root  4 Nov  7 12:34 2025-11-07T12:34:02Z
      drwxr-xr-x  4 root root  4 Nov  7 13:42 2025-11-07T13:42:36Z
      drwxr-xr-x  4 root root  4 Nov  7 15:23 2025-11-07T15:23:53Z
      drwxr-xr-x  4 root root  4 Nov 10 14:47 2025-11-10T14:47:17Z
      lrwxrwxrwx  1 root root 20 Nov  7 15:38 stable -> 2025-11-07T15:23:53Z
      
      /var/lib/proxmox-offline-mirror/mirrors/debian_trixie_security:
      total 5
      drwxr-xr-x  5 root root  6 Nov 10 14:46 .
      drwxr-xr-x 10 root root 10 Nov 10 08:37 ..
      drwxr-xr-x  4 root root  4 Nov  7 13:29 2025-11-07T13:29:33Z
      drwxr-xr-x  4 root root  4 Nov  7 15:33 2025-11-07T15:33:06Z
      drwxr-xr-x  4 root root  4 Nov 10 14:46 2025-11-10T14:46:41Z
      lrwxrwxrwx  1 root root 21 Nov  7 15:39 stable -> 2025-11-07T15:33:06Z/
      
      /var/lib/proxmox-offline-mirror/mirrors/debian_trixie_updates:
      total 5
      drwxr-xr-x  5 root root  6 Nov 10 14:54 .
      drwxr-xr-x 10 root root 10 Nov 10 08:37 ..
      drwxr-xr-x  4 root root  4 Nov  7 13:29 2025-11-07T13:29:25Z
      drwxr-xr-x  4 root root  4 Nov  7 15:32 2025-11-07T15:32:56Z
      drwxr-xr-x  4 root root  4 Nov 10 14:54 2025-11-10T14:54:40Z
      lrwxrwxrwx  1 root root 20 Nov  7 15:39 stable -> 2025-11-07T15:32:56Z
    • stable in this content means, that this state was used on the test system successfully and can be used for production systems
    • I would like to use 2 more sym-links:
      • testing -> should be used on the test cluster
      • current -> always links to the newest snapshot
    • I hope with this setup, I can create a very stable production environment, where all nodes are on the same version
      • will this be an appropriate solution?
  • Lower mirror size:
    • I have always excluded debug and games
    • -> can I exclude other content, too? I use this POM only for Proxmox VE installations -> some hints would be nice...
  • Subscription keys:
    • I think to use POM for subscriptions, I have always to create a medium, isn't it?
    • Also, I can't use this over HTTP, so I need to sync this medium somehow to my nodes?
      • As the nodes would only need the subscription data, can I create a medium without mirror? -> I have read this in a thread, but I haven't been able to get it working!
      • For my tests, I have used pve_trixie_enterprise here, but this also isn't small and I then used rsync to exclude the mirror and only snyc the ".mirror-state" file


It would be great to get some feedback about my questions!

Best regards,
Flo
 
Hi,

I have forgotten one thing.

When I add the POM repo to a Promox VE server, I can see this warning:
1762945799413.png

Is this normal?