Proxmox Backup Server 3.0.3 → 3.4.4
32 releases · 13 breaking changes · 5 security fixes · 0 advisories fixed
5security13breaking0deprecated189feature53fix
Breaking changes
- breaking fix #6358: remove group note file if present on group destroy in 3.4.2
- breaking fix #4382: api: access control: remove permissions of token on deletion. in 3.3.7
- breaking fix #3336: datastore: remove group if the last snapshot is removed to avoid confusing situations where the group directory still exists and blocks re-creating a group with another owner even though the empty group was not visible in the web UI. in 3.3.5
- breaking Improvements to Secure Boot management. With the need to update the revocation database embedded in the shim boot loader, some edge-cases were discovered and improved in the proxmox-secure-boot metapackage. Ship an apt pinning snippet to ensure that Proxmox provided packages are installed, even if… in 3.3
- breaking fix #5861: ui: remove minimum required username length in dialog for changing the owner of a backup group, as PBS support usernames shorter than 4 characters since a while now. in 3.2.9
- breaking api-types: remove influxdb bucket name restrictions in 3.2.3
- breaking Remove the hard limit on the number of tapes in a media set (issue 5229). The limit was not properly enforced and, if exceeded, blocked access to most functions via API, CLI and GUI. Instead of a partially enforced hard limit, log a task warning if the media set has more than 20 media. in 3.2
- breaking Remove whitespace when adding a subscription key, to avoid failing subscription checks due to superfluous whitespace. in 3.2
- breaking Models using i40e. Their names can get an additional port suffix like p0 added. in 3.2
- breaking fix #5229: tape: remove max sequence number limit in 3.1.5
- breaking remove datastore from internal cache based on maintenance mode to avoid that a lock file is kept open. With that lock-file closed one can use a offline maintenance mode to cleanly unmount the mount point where such a datastore resides. in 3.1.5
- breaking Some users with Intel Wi-Fi cards, like the AX201 model, reported that initialization of the card failed with Linux kernel 6.5. This is still being investigated. You should avoid booting into the new kernel if you have no physical access to your server and an Intel Wi-Fi device is used as its only… in 3.1
- breaking Some SAS2008 controllers need a workaround to get detected since kernel 6.2, see the forum thread for details. in 3.1
Security changes
- security Several vulnerabilities in GRUB that could be used to bypass SecureBoot were discovered and fixed (PSA-2025-00005-1) The Documentation for SecureBoot now includes instructions to prevent using vulnerable components for booting via a revocation policy. in 3.4
- security api: datastore list: move checking if a datastore is mounted after we ensured that the user may actually access it. While this had no effect security wise, it could significantly increase the cost of this API endpoint in big setups with many datastores and many tenants that each have only access… in 3.3.3
- security Fix a RCE vulnerability in the shim bootloader used for Secure Boot support. See PSA-2024-00007-1 for details. in 3.3
- security auth: move to hmac keys for csrf tokens as future-proofing in 3.2.3
- security Fix an issue where the encryption key of the tape-drive was unloaded too eagerly. Before proxmox-backup-server version 3.1.4-1 the additional tape-specific encryption was disabled. We recommend using the native software-defined client-side encryption for the best security. in 3.2
Every release in between
3.4.4 Sep 26, 2026
3.4.3 Sep 26, 2026
3.4.2 Jun 4, 2025
otherdatastore: various small perf optimizations
otherrestore-daemon: adapt to zpool output changes in 2.3
breakingfix #6358: remove group note file if present on group destroy
otherdocs: tuning: list default and maximum values for gc-cache-capacity
otherbackup info: avoid additional stat syscall for protected check
othertools: lru cache: document limitations for cache capacity
othergarbage collection: bypass cache if gc-cache-capacity is 0
3.4.1 Apr 16, 2025
fixui: token view: fix typo in 'lose' and rephrase token regenerate dialog message for more clarity.
otherrestrict consent-banner text length to 64 KiB.
otherdocs: describe the intend for the statically linked pbs client.
otherapi: backup: include previous snapshot name in log message.
othergarbage collection: account for created/deleted index files concurrently to GC to avoid potentially confusing log messages.
fixgarbage collection: fix rare race in chunk marking phase for setups doing high frequent backups in quick succession while immediately pruning to a single backup snapshot being left over after each such backup.
othertape: wait for calibration of LTO-9 tapes in general, not just in the initial tape format procedure.
featureLatest 6.8.12-9 Kernel as new stable default
featurePerformance improvements for garbage collection. Garbage collection frees up storage space by removing unused chunks from the datastore. For this, it has to mark all chunks that are currently in use by backup snapshots. The marking phase now uses a cache to avoid redundant marking operations. This…
featureMore fine-grained control over backup snapshot selection for sync jobs. Sync jobs are useful for pushing or pulling backup snapshots to or from remote Proxmox Backup Server instances. Group filters already allow selecting which backup groups should be synchronized. In addition, it is now possible…
featureStatic build of the Proxmox Backup command-line client. Proxmox Backup Server is tightly integrated with Proxmox VE, but its command-line client can also be used outside Proxmox VE. Packages for the command-line client are already provided for hosts running Debian or Debian derivatives. A new…
featureLatest Linux 6.14 kernel available as opt-in kernel.
featureAllow configuring a default realm which will be pre-selected in the login dialog (issue 5379).
featureThe prune simulator now allows specifying schedules with both range and step size (issue 6069).
featureEnsure that the prune simulator shows kept backups in the list of backups.
featureFix an issue where the GUI would not fully load after navigating to the "Prune & GC Jobs" tab in rare cases.
featureDeleting the comment of an API token is now possible.
featureVarious smaller improvements to the GUI.
featureFix some occurrences where translatable strings were split, which made potentially useful context unavailable for translators.
featurePerformance improvements for garbage collection (issue 5331). Garbage collection frees up storage space by removing unused chunks from the datastore. For this, its first phase updates the atime (access time) of all chunk files that are currently in use by backup snapshots. The marking phase now…
featureAdd a safeguard against filesystems that do not honor atime updates (issue 5982). The first phase of garbage collection marks used chunk files by explicitly updating their atime. If the filesystem backing the chunk store does not honor such atime updates, phase two may delete chunks that are still…
featureAllow to customize the atime cutoff for garbage collection in the datastore's tuning options. The atime cutoff defaults to 24 hours and 5 minutes, as a safeguard for filesystems that do not always immediately update the atime. However, on filesystems that do immediately update the atime, this can…
featureAllow to generate a new token secret for an API token via the API and GUI (issue 3887).
featureRevert a check for known but missing chunks when creating a new backup snapshot (reverts fix for issue 5710). This check was introduced in Proxmox Backup Server 3.3 to enable clients to re-send chunks that disappeared. However, the check turned out to not scale well for large setups, as reported…
featureEnsure proper unmount if the creation of a removable datastore fails.
featureRemove a backup group if its last backup snapshot is removed (issue 3336). Previously, the empty backup group persisted with the previous owner still set. This caused issues when trying to add new snapshots with a different owner to the group.
featureDecouple the locking of backup groups, snapshots, and manifests from the underlying filesystem of the datastore (issue 3935). Lock files are now created on the tmpfs under /run instead of the datastore's backing filesystem. This can also alleviate issues concerning locking on datastores backed by…
featureEnsure that permissions of an API token are deleted when the API token is deleted (issue 4382).
featureEnsure that chunk files are inserted with the correct owner if the process is running as root.
featureFix an issue where prune jobs would not write a task log in some cases, causing the tasks to be displayed with status "Unknown".
featureWhen listing datastores, parse the configuration and check the mount status after the authorization check. This can lead to performance improvements on large setups.
featureImprove the error reporting by including more details (for example the errno) in the description.
featureEnsure that "Wipe Disk" also wipes the GPT header backup at the end of the disk (issue 5946).
featureEnsure that the task status is reported even if logging is disabled using the PBS_LOG environment variable.
featureFix an issue where proxmox-backup-manager would write log output twice.
featureFix an issue where a worker task that failed during start would not be cleaned up.
featureFix a race condition that could cause an incorrect update of the number of current tasks.
featureIncrease the locking timeout for the task index file to alleviate issues due to lock contention.
featureFix an issue where verify jobs would be too eagerly aborted if the manifest update fails.
featureFix an issue where file descriptors would not be properly closed on daemon reload.
featureFix an issue where the version of a remote Proxmox Backup Server instance was checked incorrectly.
featureStatic build of the Proxmox Backup command-line client (issue 4788). Proxmox Backup Server is tightly integrated with Proxmox VE, but its command-line client can also be used outside Proxmox VE. Packages for the command-line client are already provided for hosts running Debian or Debian…
featureAllow to read passwords from credentials passed down by systemd. Examples are the API token secret for the Proxmox Backup Server, or the password needed to unlock the encryption key.
featureImprovements to the vma-to-pbs tool, which allows importing Proxmox Virtual Machine Archives (VMA) into Proxmox Backup Server:
featureOptionally read the repository or passwords from environment variables, similarly to proxmox-backup-client.
featureAdd support for the --version command-line option.
securitySeveral vulnerabilities in GRUB that could be used to bypass SecureBoot were discovered and fixed (PSA-2025-00005-1) The Documentation for SecureBoot now includes instructions to prevent using vulnerable components for booting via a revocation policy.
+22 more items in the release notes3.3.7 Apr 5, 2025
fixfix #5982: garbage collection: add a check to ensure that the underlying file system supports and honors file access time (atime) updates. The check is performed once on datastore creation and on start of every garbage collection (GC) task, just to be sure. It can be disabled in the datastore…
othergarbage collection: support setting a custom access time cutoff, overriding the default of one day and five minutes.
otherui: expose flag for GC access time support safety check and the access time cutoff override in datastore tuning options.
otherdocs: describe rationale for new GC access time update check setting and the access time cutoff check in tuning options.
featureaccess control: add support to mark a specific authentication realm as default selected realm for the login user interface.
breakingfix #4382: api: access control: remove permissions of token on deletion.
fixfix #3887: api: access control: allow users to regenerate the secret of an API token without changing any existing ACLs.
fixfix #6072: sync jobs: support flags to limit sync to only encrypted and/or verified snapshots.
featureui: datastore tuning options: expose overriding GC cache capacity so that admins can either restrict the peak memory usage during GC or allow GC to use more memory to reduce file system IO even for huge (multiple TiB) referenced data in backup groups.
otherui: datastore tuning options: increase width and rework labels to provide a tiny bit more context about what these options are.
otherui: sync job: increase edit window width to 720px to make it less cramped.
otherui: sync job: small field label casing consistency fixes.
3.3.6 Apr 3, 2025
otherdatastore: ignore group locking errors when removing snapshots, they normally happen only due to old-locking, and the underlying snapshot is deleted in any case at this point, so it's no help to confuse the user.
featureapi: datastore: add error message on failed removal due to old locking and tell any admin what they can do to switch to the new locking.
featureui: only add delete parameter on token edit, not when creating tokens.
featurepbs-client: allow reading fingerprint from system credential.
otherdocs: client: add section about system credentials integration.
3.3.5 Apr 2, 2025
otherapi: config: use guard for unmounting on failed datastore creation
otherclient: align description for backup specification to docs, using archive-name and type over label and ext.
featureclient: read credentials from CREDENTIALS_DIRECTORY environment variable following the "System and Service Credentials" specification. This allows users to use native systemd capabilities for credential management if the proxmox-backup-client is used in systemd units or, e.g., through a wrapper…
fixfix #3935: datastore/api/backup: move datastore locking to '/run' to avoid that lock-files can block deleting backup groups or snapshots on the datastore and to decouple locking from the underlying datastore file-system.
fixapi: fix race when changing the owner of a backup-group.
breakingfix #3336: datastore: remove group if the last snapshot is removed to avoid confusing situations where the group directory still exists and blocks re-creating a group with another owner even though the empty group was not visible in the web UI.
featurenotifications: clean-up and add dedicated types for all templates as to allow declaring that interface stable in preparation for allowing overriding them in the future (not included in this release).
featuretape: introduce a tape backup job worker-thread option for restores. Depending on the underlying storage using more threads can dramatically improve the restore speed. Especially fast storage with low penalty for random access, like flash-storage (SSDs) can profit from using more worker threads.…
othergarbage collection: generate index file list via datastore iterators in a structured manner.
fixfix #5331: garbage collection: avoid multiple chunk atime updates by keeping track of the recently marked chunks in phase 1 of garbage to avoid multiple atime updates via relatively expensive utimensat (touch) calls. Use a LRU cache with size 32 MiB for tracking already processed chunks, this…
featurelogging helper: use new builder initializer – not functional change intended.
3.3.4 Mar 13, 2025
fixfix #6185: client/docs: explicitly mention archive name restrictions
otherdocs: using-the-installer: adapt to raised root password length requirement
otherdisks: wipe: replace dd with write_all_at for zeroing disk
fixfix #5946: disks: wipe: ensure GPT header backup is wiped
otherdocs: fix hash collision probability comparison
3.3.3 Feb 11, 2025
securityapi: datastore list: move checking if a datastore is mounted after we ensured that the user may actually access it. While this had no effect security wise, it could significantly increase the cost of this API endpoint in big setups with many datastores and many tenants that each have only access…
fixRevert "fix #5710: api: backup: stat known chunks on backup finish" due to a big performance impact relative to what this is protectign against. We will work out a more efficient fix for this issue in the future.
otherprune simulator: show backup entries that are kept also in the flat list of backups, not just in the calendar view.
otherdocs: improve the description for the garbage collection's cut-off time
otherpxar extract: correctly honor the overwrite flag
featureapi: datastore: add missing log context for prune to avoid a case where the worker state being unknown after it finished.
otherdocs: add synopsis and basic docs for prune job configuration
otherbackup verification: handle manifest update errors as non-fatal to avoid that the job fails, as we want to continue with verificating the rest to ensure we uncover as much potential problems as possible.
fixfix #4408: docs: add 'disaster recovery' section for tapes
fixfix #6069: prune simulator: correctly handle schedules that mix both, a range and a step size at once.
fixclient: pxar: fix a race condition where the backup upload stream can miss an error from the create archive function, because the error state is only set after the backup stream was already polled. This avoids a edge case where a file-based backup was incorrectly marked as having succeeded while…
3.3.2 Dec 10, 2024
fixfile-restore: fix regression with the new blockdev method used to pass disks of a backup to the isolated virtual machine.
3.3.1 Dec 3, 2024
featuretree-wide: add missing O_CLOEXEC flags to openat calls to avoid passing any open FD to new child processes which can have undesired side-effects like keeping a lock open longer than it should.
fixcargo: update proxmox dependency of rest-server and sys crates to include some fixes for open FDs and a fix for the active task worker tracking, as on failing to update the index file the daemon did not finished the worker, causing a reference count issue where an old daemon could keep running…
otherui: check that store is set before trying to select anything in the garbage collection (GC) job view.
featureLatest 6.8.12-4 Kernel as new stable default
featurePush direction for sync jobs. Sync jobs can already pull backup snapshots from remote Proxmox Backup Server instances. The new push direction allows copying backup snapshots from the local instance to remote instances. This can be useful in setups where the remote instance cannot initiate…
featureSupport for removable datastores. Datastores can now be created on removable media for offline storage. After unmounting the removable datastore, the medium can be removed. The datastore can be used on multiple Proxmox Backup Server instances.
featureWebhook target for the notification system. The new webhook notification target allows notification events to trigger HTTP requests. Request headers and body can be customized and can contain notification metadata. This allows users to push notifications to any target that supports webhooks.
featureNew change detection modes for speeding up file-based backups. Metadata and data of backup snapshots are now stored in two separate archives. Optionally, files that have not changed since the previous backup snapshot can be identified using the previous backup snapshot's metadata archive.…
featureAllow to set a consent banner that users must acknowledge before logging in (issue 5463). This can be required for compliance reasons. The banner supports Markdown and can be set in Configuration → Other → General → Consent Text.
featureColumns in the "Prune & GC Jobs" view are now sortable (issue 5422).
featureFix a short-lived regression where updating proxmox-backup-server without updating proxmox-widget-toolkit made the GUI inaccessible (issue 5503).
featureFix an issue where the "Change owner" dialog would not accept usernames shorter than 8 characters (issue 5861).
featureDisallow creating a datastore on / via the GUI, as this is most likely unintended.
featureFix an issue where clicking on an external link to the GUI would display a login screen, even if the current session was still valid.
featureShow only installed services in the node's system panel by default, but optionally allow showing all services (issue 5611).
featureRight-align numbers in the S.M.A.R.T. values table (issue 5831).
featureFix an issue where the installed Proxmox Backup Server version was incorrectly rendered with a hyphen instead of a dot.
featureImproved translations, among others:
featureBulgarian (NEW!)
featureArabic
featureFrench
featureGerman
featureItalian
featureJapanese
featureRussian
featureSpanish
featureTraditional Chinese
featurePush direction for sync jobs (issue 3044). Sync jobs can already pull backup snapshots from remote Proxmox Backup Server instances. The new push direction allows copying backup snapshots from the local instance to remote instances. This can be useful in setups where the remote instance cannot…
featurePull sync jobs can now optionally resync corrupt chunks (issue 3786). When syncing a backup group from a remote, the sync job checks whether the last local snapshot has previously failed verification. If this is the case, the sync job overwrites the local snapshot with the remote snapshot. As the…
featureSupport for removable datastores. Datastores can now be created on removable media for offline storage. After unmounting the removable datastore in the GUI, the medium can be removed. The datastore can be used on multiple Proxmox Backup Server instances. Multiple datastores per device are also…
featureCheck for known but missing chunks when creating a new backup snapshot (issue 5710). Known chunks are chunks that are contained in the previous snapshot of the backup group. When creating a new backup snapshot, the list of known chunks is sent to the client, so the client can skip uploading known…
featureFix a regression where an early HTTP connection close could result in high CPU usage and denial-of-service (issue 5868). Early connection closes are used by some monitoring solutions performing health checks.
featureAllow reusing already-existing datastores, but disallow creating datastores in non-empty directories (issue 5439).
featureFix a regression that prevented legacy notifications for successful sync jobs.
featureFix an issue where a delayed TLS Client Hello would cause the API server to respond with a plain HTTP 400 "Bad Request" response (issue 5105).
featureAbort garbage collection if a nested datastore is encountered, as garbage collection cannot be done safely on nested datastores.
featureUpdate choices of cryptographic primitives:
featureCSRF tokens now use a standard HMAC construction.
featureMigrate to yescrypt for hashing passwords. Old hashes will be upgraded to the new scheme once a user logs in.
featureMigrate to Ed25519 for authentication tickets.
featureUse constant-time comparison for additional hardening against timing side-channels.
breakingImprovements to Secure Boot management. With the need to update the revocation database embedded in the shim boot loader, some edge-cases were discovered and improved in the proxmox-secure-boot metapackage. Ship an apt pinning snippet to ensure that Proxmox provided packages are installed, even if…
securityFix a RCE vulnerability in the shim bootloader used for Secure Boot support. See PSA-2024-00007-1 for details.
+69 more items in the release notes3.2.14 Nov 27, 2024
otherpull-sync: do not interpret older missing snapshots as needs-resync
otherapi: directory: use relative path when creating removable datastore
otherui: prune keep input: actually clear value on clear trigger click
fixui: datastore edit: fix empty-text for path field
othersync: push: pass full error context when returning error to job
otherapi: mount removable datastore: only log an informational message if the correct device is already mounted.
featureapi: sync: restrict edit permissions for the new push sync jobs to avoid that a user is able to create or edit sync jobs in push direction, but not able to see them.
fixapi: create datastore: fix checks to avoid that any datastore can contain another one to better handle the case for the new removable datastores.
3.2.13 Nov 26, 2024
otherupdate pxar dependency to fix selective extraction with the newly supported match patterns.
otherreuse-datastore: avoid creating another prune job
featureapi: notification: add API routes for webhook targets
featuremanagement cli: add CLI for webhook targets
otherui: utils: enable webhook edit window
featureui: utils: add task description for mounting/unmounting
featureui: add onlineHelp for consent-banner option
otherdocs: client: fix example commands for client usage
otherdocs: explain some further caveats of the change detection modes
otherui: use same label for removable datastore created from disk
featureapi: maintenance: allow setting of maintenance mode if 'unmounting'
otherdocs: add more information for removable datastores
otherui: sync jobs: revert to single list for pull/push jobs, improve distinction between push and pull jobs through other means.
otherui: sync jobs: change default sorting to 'store' -> 'direction' -> 'id'
featureui: sync jobs: add search filter-box
otherconfig: sync: use same config section type sync for push and pull, note that this breaks existing configurations and needs manual clean-up. As the package versions never made it beyond test this is ignored, as while it's not really ideal we never give guarantees for testing package versions, and…
otherapi: removable datastores: require Sys.Modify permission on /system/disks
featureui: allow resetting unmounting maintenance
otherdatastore: re-phrase error message when datastore is unavailable
fixclient: backup writer: fix regression in progress output
3.2.11 Nov 21, 2024
fixfix #3044: server: implement push support for sync operations
otherpush sync related refactors
3.2.10 Nov 19, 2024
otherapi: disk list: do not fail but just log error on gathering smart data
othercargo: require proxmox-log 0.2.6 to reduce spamming the logs with the whole worker task contents
3.2.9 Nov 14, 2024
otherclient: catalog: fallback to metadata archives for dumping the catalog
otherclient: catalog shell: make the catalog optional and use the pxar accessor for navigation if the catalog is not provided, like its the case for example for split pxar archives.
otherclient: catalog shell: drop payload offset in stat output, as this is a internal value that only helps on debugging some specific development.
fixsync: fix premature return in snapshot-skip filter logic to avoid that the first snapshot newer that the last synced one gets unconditionally included.
breakingfix #5861: ui: remove minimum required username length in dialog for changing the owner of a backup group, as PBS support usernames shorter than 4 characters since a while now.
fixfix #5439: allow one to reuse an existing datastore on datastore creation
otherui: disallow datastore in the file system root, this is almost never what user want and they can still use the CLI for such an edge case.
fixfix #5233: api: tape: add explicit required permissions for the move tape, update tape and destroy tape endpoints, requiring Tape.Modify and Tape.Write on the /tape ACL object path, respectively. This avoids requiring the use of the root account for basic tape management.
otherclient: catalog shell: make the root element its own parent to avoid navigating below archive root, which makes no sense and just causes odd glitches.
otherapi: disk management: avoid retrieving lsblk result twice when listing disks, while it's not overly expensive it certainly does not help to be performant either.
otherapi: disk management: parallelize retrieving the output from smartctl checks.
fixfix #5600: pbs2to3: make check more flexible to allow one to run arbitrary newer '-pve' kernels after upgrade
otherclient: pxar: perform match pattern check for exclusion only once
featureclient: pxar: add debug output for exclude pattern matches to more conveniently debug possible issues.
fixfix #5868: rest-server: handshake detection: avoid infinite loop on connections abort
3.2.8 Oct 18, 2024
otherswitch various log statements in worker tasks to the newer, more flexible proxmox log crate. With this change, errors from task logs are now also logged to the system log, increasing their visibility.
otherdatastore api: list snapshots: avoid calculating protected attribute twice per snapshot, this reduces the amounts of file metadata requests.
otheravoid re-calculating the backup snapshot path's date time component when getting the full path, reducing calls to the relatively slow strftime function from libc.
fixfix #3699: client: prefer the XDG cache directory for temporary files with a fallback to using /tmp, as before.
othersync job: improve log message for when syncing the root namespace.
otherclient: increase read buffer from 8 KiB to 4 MiB for raw image based backups. This reduces the time spent polling between the reader, chunker and uploader async tasks and thus can improve backup speed significantly, especially on setups with fast network and storage.
otherclient benchmark: avoid unnecessary allocation in the AES benchmark, causing artificial overhead. The benchmark AES results should now be more in line with the hardware capability and what the PBS client could already do. On our test system we saw an increase by an factor of 2.3 on this specific…
otherdocs: add external metrics server page
othertfa: webauthn: serialize OriginUrl following RFC6454
featurefactor out apt and apt-repository handling into a new library crate for reuse in other projects. There should be no functional change.
fixfix various typos all over the place found using the rust based typos tool.
featuredatastore: data blob compression: increase compression throughput by switching away from a higher level zstd method to a lower level one, which allows us to control the target buffer size directly and thus avoid some allocation and syscall overhead. We saw the compression bandwidth increase by a…
otherdaily-update: ensure notification system context is initialized.
otherbackup reader: derive if debug messages should be printed from the global log level. This avoids printing some debug messages by default, e.g., the "protocol upgrade done" message from sync jobs.
otherui: user view: disable 'Unlock TFA' button by default to improve UX if no user is selected.
othermanager cli: ensure the worker tasks finishes when triggering a reload of the system network.
fixfix #5622: backup client: properly handle rate and burst parameters. Previously, passing any non-integer value, like 1mb, was ignored.
othertape: read element status: ignore responses where the library specifies that it will return a volume tag but then does not includes that field in the actual response. As both the primary and the alternative volume tag are not required by PBS, this specific error can simply be downgraded to a…
otherpxar: dump archive: print entries to stdout instead of stderr
othersync jobs: various clean-ups and refactoring that should not result in any semantic change.
othermetric collection: put metrics in a cache with a 30 minutes lifetime.
featureapi: add /status/metrics API to allow pull-based metric server to gather data directly.
otherpartial fix #5560: client: periodically show backup progress
otherdocs: add proxmox-backup.node.cfg man page
otherdocs: sync: explicitly mention removed-vanish flag
3.2.7 Jul 3, 2024
otherdocs: drop blanket statement recommending against remote storage
fixui: gc job edit: fix i18n gettext usage
otherpxar: improve error handling, e.g., avoiding duplicate information
featureclose #4763: client: add command to forget (delete) whole backup group with all its snapshots
fixclose #5571: client: fix regression for map command
otherclient: mount: wait for child to return before exiting to provide better UX for some edge paths
fixfix #5304: client: set process uid/gid for .pxarexclude-cli to avoid issues when trying to backup and restore the backup as non-root user.
otherhttp client: keep renewal future running on failed re-auth to make it more resilient against some transient errors, like the request just failing due to network instability.
fixdatastore: fix problem with operations counting for the case where the .chunks/ directory is not available (deleted/moved)
othermanager: use confirmation helper in wipe-disk command
3.2.6 Jun 17, 2024
othertape: disable Programmable Early Warning Zone (PEWZ)
othertape: handle PEWZ like regular early warning
otherdocs: add note for not using remote storages
fixclient: pxar: fix fuse mount performance for split archives
3.2.5 Jun 10, 2024
featurepxar: add support for split archives
fixfix #3174: pxar: enable caching and meta comparison
otherdocs: file formats: describe split pxar archive file layout
otherdocs: add section describing change detection mode
featureapi: datastore: add optional archive-name to file-restore
otherclient: backup: conditionally write catalog for file level backups
otherdocs: add table listing possible change detection modes
3.2.4 Jun 5, 2024
fixfix: network api: permission using wrong pathname
fixfix #5503: d/control: bump dependency for proxmox-widget-toolkit
featureauth: add locking to PbsAuthenticator to avoid race conditions
3.2.3 May 22, 2024
breakingapi-types: remove influxdb bucket name restrictions
otherapi: datastore status: delay lookup after permission check to improve consistency of tracked read operations
othertape: improve throughput by not unnecessarily syncing/committing after every archive written beyond the first 128 GiB
featuretape: save 'bytes used' in the tape inventory and show them on the web UI to allow users to more easily see the usage of a tape
othertape drive status: return drive activity (like cleaning, loading, unloading, writing, ...) in the API and show them in the UI
otherui: tape drive status: avoid checking some specific status if the current drive activity would block doing so anyway
othertape: write out basic MAM host-type attributes to media to make them more easily identifiable as Proxmox Backup Server tape by common LTO tooling.
fixapi: syslog: fix the documented type of the return value
fixfix #5465: restore daemon: mount NTFS with UTF-8 charset
otherrestore daemon: log some more errors on directory traversal
fixfix #5422: ui: garbage-collection: make columns in global view sortable
securityauth: move to hmac keys for csrf tokens as future-proofing
otherauth: upgrade hashes on user log in if a users password is not hashed with the latest password hashing function for hardening purpose
featureauth: use ed25519 keys when generating new auth api keys
fixnotifications: fix legacy sync notifications
otherdocs: document notification-mode and merge old notification section
otherdocs: notifications: rewrite overview for more clarity
otherui: datastore options: link to 'notification-mode' section
otheracme: explicitly print a query when prompting for the custom directory URI
3.2.2 Apr 25, 2024
otherui: notifications fix empty text format for the default mail author
otherui: tape backup: do not try to delete the namespace property if its empty
fixui: sync job: fix error if local namespace is selected first
featureLatest 6.8 Kernel as new stable default
featureNew flexible notification system. Send notifications not only via the local Postfix MTA, but also via authenticated SMTP or to Gotify instances. Flexible notification routing with matcher-based rules to decide which targets receive notifications about which events.
featureSupport for automated and unattended installation of Proxmox Backup Server. Proxmox Backup Server now ships a tool that prepares a Proxmox Backup Server ISO for automated installation. The prepared ISO retrieves all required settings for automated installation from an answer file. The answer file…
featureAbility to exclude particular backup groups from sync and tape backup jobs. Group filters already supported including particular backup groups, and now additionally support excluding particular backup groups. This allows more flexibility when defining which backup groups should be synchronized…
featureOverview of prune and garbage collection jobs of all datastores. A new tab in the datastore summary panel shows defined prune and garbage collection jobs of all datastores. This allows to quickly assess whether all datastores are correctly set up to regularly run important maintenance tasks.
featureSupport for Active Directory authentication realms. The new Active Directory realm type synchronizes users and groups from a remote Active Directory server. This makes it easier to integrate with existing Enterprise infrastructure.
featureAllow managing VLAN network interfaces in the GUI.
featureA new "Prune & GC Jobs" tab in the datastore summary panel shows an overview of prune and garbage collection jobs of all datastores (issue 3217).
featureThe garbage collection job status view now displays the amount of removed, as well as, pending data.
featureAllow usernames shorter than 4 characters, as they are already allowed by the backend (issue 4819).
featureThe datastore summary now handles missing usage information gracefully and avoids logging errors to the console.
featureFix an issue where the node summary page would not display the version of a running foreign kernel (issue 5117).
featureFix an issue where individual entries of the DNS configuration for the system (searchdomain and DNS Servers) could not be deleted via the GUI.
featureFix an issue where creating a new InfluxDB metric server entry would fail if one already exists.
featureThe context menu of backup snapshots and groups now allows to copy the snapshot or group name to the clipboard (issue 5188).
featureDisallow setting an empty schedule for a prune job.
featureVarious fixes to the sync job overview.
featureFix issues where some edit windows would send API parameters that were not accepted by the backend.
featureFix an issue where the settings window would fail to reset the layout.
featureFix an issue where the GUI used an incorrect language code for Korean, and provide a clean transition for users who still have a cookie with the incorrect language code set.
featureFix xterm.js not loading in certain OS+Browser constellations, for example iOS (issue 5063).
featureFix an issue where the date picker would choose the wrong date after changing to a different month.
featureClarify the confirmation prompt for removing a certificate without a name.
featureFix an issue where edit windows would not be correctly masked while loading.
featureDisplay the end-of-life message as a notice up until three weeks before the end-of-life date, and display it as a warning from that point on.
featureMove the "Reset" button for edit windows to an icon-only button in the title bar (issue 5277). This reduces the risk of misclicking and accidentally resetting form data.
featureThe TFA input field now sets an autocompletion hint for improved compatibility with password managers (issue 5251).
featureImproved translations, among others:
featureFrench
featureGerman
featureItalian
featureJapanese
featureKorean
featureSimplified Chinese
featureSpanish
featureTraditional Chinese
breakingRemove the hard limit on the number of tapes in a media set (issue 5229). The limit was not properly enforced and, if exceeded, blocked access to most functions via API, CLI and GUI. Instead of a partially enforced hard limit, log a task warning if the media set has more than 20 media.
securityFix an issue where the encryption key of the tape-drive was unloaded too eagerly. Before proxmox-backup-server version 3.1.4-1 the additional tape-specific encryption was disabled. We recommend using the native software-defined client-side encryption for the best security.
breakingRemove whitespace when adding a subscription key, to avoid failing subscription checks due to superfluous whitespace.
breakingModels using i40e. Their names can get an additional port suffix like p0 added.
+57 more items in the release notes3.1.5 Mar 25, 2024
fixfix #5190: api: OIDC: accept generic URIs for the ACR value
breakingfix #5229: tape: remove max sequence number limit
featureclient: add "delete-groups" option to allow one to delete all groups in a hierarchy, which allows removing non-empty namespaces
fixfix #4975: client: add option to ignore E2BIG error flag when restoring, to workaround the interface limitation of the kernel where on some file systems can have a bigger extended attribute (xattr) as the kernel supports reading. This can happen due to the file system having been accessed by…
otherdocs: clarify prune settings slightly more
otherui: trim whitespaces when adding a subscription key
fixui: system config: fix deleting DNS entries
fixfix #5217: api: send missing header when upgrading to HTTP/2 to improve support with reverse proxies like caddy
otherdocs: lto barcod generator: disable add button when fields are not valid
otherdocs: lto barcode generator: add LTO-9 and WORM types
otherui: adapt to the API enforcing the not accepting any additional parameters if a API endpoint does not explicitly state that it needs that behavior:
othermetrics: avoid trying to load existing config, fixes case where a wrong digest was send along, failing the creation of the metrics host entry
otheravoid sending a 'delete' parameter on create for tape backup jobs, prune settings, sync jobs, verify jobs
otheruser edit: don't send realm property
otherserver: sync job: return PullStats for pull related methods
fixfix #5285: api: sync job: add job summary to task log
otherui: tape: transfer: increase timeout to 3 minutes
featureadd 'confirmation-password' parameter to user password change API/UI
breakingremove datastore from internal cache based on maintenance mode to avoid that a lock file is kept open. With that lock-file closed one can use a offline maintenance mode to cleanly unmount the mount point where such a datastore resides.
otherdocs: clarify difference between zfs cache and log
fixfix #5188: gui: add copy to clipboard on snapshots
otherapi: sync job: log stats for removed vanished entities
otherdocs: add examples for --exclude parameter
otherui: prune job: disallow setting blank schedule
3.1.4 Feb 1, 2024
otherapi: acme: skip serializing empty 'api' and 'data' option
fixtape: fix regression in restoring an encryption key from medium, avoid trying to load the key to the drive, which cannot work in this special case.
3.1.3 Jan 22, 2024
otherimprove efficiency of detecting if a block device is a partition
featureacme: api: add option for external account binding to account registration endpoint
otherui: datastore summary handle non-existent 'avail' and 'used' status values
featuretape: allow configuring the time out for "wait until ready" to better cope with the long initialization duration that happens on the first use of LTO 9+ tapes
othertape: improve error on decode element status page
othertape: improve LTO 9 compatibility
fixfix #4904: tape changer: add option to explicitly eject the tape before unloading it
otherdocs: tape: replace use of 'export-media' with correct 'export-media-set' option
otherdocs: tape: add LTO 9 considerations
fixfix #5117: ui: node info: avoid invalid array access for certain foreign kernels
otherd/control: explicitly depend on gdisk package to ensure it's available when installing on top of a plain Debian installation
featuretape: work around buggy changer implementations when reading the element status
othersystem report: include prune.cfg
fixfix #4315: jobs: modify group filter so include/exclude is tracked
otherui: show if Filter includes or excludes
featuredatastore: add additional context for a parsing error when getting the owner of a backup group
otherapi: tape: optionally accept uuid for destroying or moving a media, so that one can uniquely identify existing tapes with duplicate labels.
featureapi: tape: don't allow duplicate media label-texts anymore
otherui: tape inventory: use uuid as id
featureui: tape: add button to remove a medium from the inventory, while not touching the data
otherapi: custom certificate upload: make key optional and use the existing key, if it's not specified.
featureclose #4819: ui: allow usernames shorter than 4 characters
othertape: rework on-drive encryption key handling and ensure this key does not gets unloaded to early
3.1.2 Nov 30, 2023
fixsync: fix recent regression with recursive remote sync
fixsync: fix source store+namespace printing to refer to the actual namespace
featureSecure Boot support. Proxmox Backup Server now includes a signed shim bootloader trusted by most hardware's UEFI implementations. All necessary components of the boot chain are available in variants signed by Proxmox.
featureLocal sync jobs for efficiently copying backup snapshots between local datastores. This is particularly useful for complex setups involving tiered datastores, for example, where a smaller, faster datastore is used for incoming backups, and a slower one for long-term archival.
featureAutomatically upgrade HTTP connections to HTTPS.
featureSeamless upgrade from Proxmox Backup Server 2.4, see Upgrade from 2 to 3, which includes the addition of a pbs2to3 helper tool in the old stable release.
featureImprovements to the node summary panel:
featureThe summary now indicates whether the node was booted in legacy (BIOS) mode, EFI mode, or EFI mode with Secure Boot enabled.
featureThe currently running kernel is now reported more compactly by indicating only the version and the build date.
featureA new button in the datastore can now conveniently display connection information for connecting to that particular datastore from Proxmox Virtual Environment, another Proxmox Backup Server instance, or the backup client.
featureIf no comment is set for a backup group, the web GUI now displays the note of the last snapshot instead (issue 4260).
featureSupport wiping disks in the Storage/Disks menu, providing parity with the functionality in Proxmox VE (issue 3690).
featureAllow removing systemd mount units of unused mounted directories via GUI and CLI. This enables users to unmount the directory of a removed datastore, so that they can wipe and reuse the disk.
featureRight-clicking on a backup group or snapshot now opens a context menu for easier access to relevant actions.
featureAutomatically redirect HTTP requests to HTTPS for convenience. This avoids "Connection reset" browser errors that can be confusing, especially after setting up Proxmox Backup Server the first time.
featureThe ZFS creation window does not show a reset button anymore, as this button does not make sense for creation windows.
featureUpdate external links to proxmox.com that changed during the website redesign.
featureImproved translations, among others:
featureCroatian (NEW!)
featureGeorgian (NEW!)
featureArabic
featureCatalan
featureGerman
featureItalian
featurePolish
featureSimplified Chinese
featureSpanish
featureTraditional Chinese
featureUkrainian
featureSeveral remaining occurrences of the GiB unit in the GUI can now be translated (issue 4551).
featureSupport for local sync jobs that pull contents of a local datastore to another local datastore. Previously, sync jobs could only pull datastores from remote Proxmox Backup Server instances over the network. Now, sync jobs can alternatively pull contents from a local datastore.
featureCreating a datastore with prune options now creates a corresponding prune job (issue 4374). Previously, the prune options given on datastore creation were ignored.
featureThe backup task log now contains the IP address of the client initiating the backup, in order to simplify troubleshooting (issue 3777).
featureFix an issue where garbage collection would fail with an error if a snapshot is deleted while the job is running. This situation is now handled gracefully without an error (issue 4823).
featureFix an issue where scheduled garbage collection would not run if the task log of the previous garbage collection was missing, for example due to a host crash or power loss (issue 4895).
featureWith the Proxmox repositories having support for fetching them directly the changelogs for new package versions shown in the UI are now all gathered with apt changelog.
featureImprove checks when setting up an offline subscription key.
featureMails sent by Proxmox Backup Server now contain an Auto-Submitted header to avoid triggering automated replies (issue 4162).
featureImprove clarity of API parameter verification errors by showing a list of errors if there is more than one error.
featureImprove the proxmox-backup-debug tool output by including the chunk size and compression state of chunks.
breakingSome users with Intel Wi-Fi cards, like the AX201 model, reported that initialization of the card failed with Linux kernel 6.5. This is still being investigated. You should avoid booting into the new kernel if you have no physical access to your server and an Intel Wi-Fi device is used as its only…
breakingSome SAS2008 controllers need a workaround to get detected since kernel 6.2, see the forum thread for details.
+33 more items in the release notes3.0.4 Oct 2, 2023
otherrebuild with env_logger 0.10, proxmox-api-macro 1.0.6 and syn 2
otherupdate dependencies (tokio, libc, serde, openssl, futures, bindgen)