VersionDrift
Product

Proxmox VE 6.0 → 9.2.7

105 releases · 114 breaking changes · 18 security fixes · 2 advisories fixed

18security114breaking21deprecated590feature148fix

Is 6.0 affected? · What changed up to 9.2.21

Vulnerabilities fixed by this upgrade

  • 8.8 CVE-2023-43320 An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1.1 thru v.3.0, and Proxmox Mail Gateway v.7.1 thru v.8.0 allows a remote authenticated attacker to es…
  • 9.0 CVE-2022-31358 A reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web scripts or HTML via non-existent endpoints under…

Breaking changes

  • breaking Remove redundant checks for USB hotplug support and unplug events during unrelated VM configuration changes. in 9.2
  • breaking Windows VMs using machine versions 11.0 or 11.0+pve1 are potentially affected by this issue. Such guests may have been created with the packages available in the Proxmox VE 9.2 ISO or qemu-server older than 9.2.0. Upgrading the qemu-server package and setting the machine version to 11.0+pve2 or… in 9.2
  • breaking Windows VMs using machine version 11.0+pve2 or newer are not affected by this issue. Under qemu-server 9.2.0 or later, new Windows VMs are created with an unaffected machine version. in 9.2
  • breaking Windows VMs using machine versions older than 11.0 are not affected if using qemu-server 9.2.0 or newer. in 9.2
  • breaking ui: sdn: fabrics: add management UI for the new WireGuard fabric protocol. New panels under Datacenter > SDN > Fabrics let users create and edit WireGuard interfaces with their peer references on internal nodes, manage external peer definitions, and review per-node available peers. Public keys,… in 9.1.12
  • breaking fix #2077: pvenode: drop dependency on GNU readline Perl module in favor of our own PTY module. While it's less flexible, it's much simpler and robust, and–more importantly–it has no issues with being instantiated more than once, which recently became an error in the readline module, breaking EAB… in 9.1.2
  • breaking Remove notice marking AMD SEV-ES and SEV-SNP as highly experimental. in 9.1
  • breaking Remove the computed and obsolete group field from the service status data. in 9.1
  • breaking Remove obsolete checks and warnings concerning RRD migration. in 9.1
  • breaking ui: ha: remove default focus from VM/CT dropdown in resource edit window to avoid opening the picker immediately when opening the window. in 9.0.12
  • breaking ui: guest snapshot: remove excess '}' at the end of window title in 9.0.11
  • breaking Container setup does not generate a DSA SSH host key anymore, as OpenSSH removed support for DSA. in 9.0
  • breaking Drop support for GlusterFS starting with PVE 9, as it is unmaintained. in 9.0
  • breaking Remove an outdated warning about entropy starvation when using /dev/random as an entropy source. in 8.4
  • breaking Rework and improve the Netbox IPAM plugin to properly synchronize the deletion and updates of addresses and networks (issue 5496). Refactor the code to consistently handle errors reported by Netbox. Delete subnets in Netbox after they are removed in Proxmox VE. Properly return the address after… in 8.4
  • breaking Manually create the IP Ranges in Netbox: in 8.4
  • breaking Go to IPAM → IP Ranges and add the DHCP ranges you have configured for your subnet manually in 8.4
  • breaking Let Proxmox VE recreate the IP Ranges: in 8.4
  • breaking Go to SDN → VNets in 8.4
  • breaking Edit the Subnet and delete all DHCP ranges, then click OK in 8.4
  • breaking Edit the Subnet, re-create the DHCP ranges, then click OK in 8.4
  • breaking Apply the SDN configuration in 8.4
  • breaking ui: remove warning about entropy starvation of /dev/random, it does not apply since kernel 5.6 anymore. in 8.3.6
  • breaking Improvements to Secure Boot management. With the need to update the revocation database embedded in the shim boot loader, some edge-cases were discovered and improved in the proxmox-secure-boot metapackage. Ship an apt pinning snippet to ensure that Proxmox provided packages are installed, even if… in 8.3
  • breaking ui: remove experimental from change detection modes description in 8.2.9
  • breaking Integrate patches that make it possible to manually install and use the upstream Ceph dashboard. Due to upstream changes, Proxmox VE 8.0 and 8.1 were incompatible with the Ceph dashboard. in 8.2
  • breaking Remove deprecated and now forbidden priority field from change request to PowerDNS (issue 5275). in 8.2
  • breaking Models using i40e. Their names can get an additional port suffix like p0 added. in 8.2
  • breaking d/postinst: make deb-systemd-invoke non-fatal to avoid potentially breaking an update for unrelated reasons in 8.1.11
  • breaking Remove the 10-minute timeout for allocating VM disks when restoring from backup, as this timeout may be exceeded if disks are large or network storage is involved (issue 2817). in 8.1
  • breaking Using the Console/Shell on a PVE node is now possible for all users with the appropriate permissions (Sys.Console). The restriction to the pam was removed. The users will still need to login as a system user on the shell though. in 8.1
  • breaking With Kernel 6.5 and ZFS it can happen that the host hits a kernel bug when starting a VM with hugepages, and the host must be rebooted. More information can be found in the forum and in the bug reports for ZFS and Linux kernel. in 8.1
  • breaking Some users with Intel Wi-Fi cards, like the AX201 model, reported that initialization of the card failed with Linux kernel 6.5. This is still being investigated. You should avoid booting into the new kernel if you have no physical access to your server and an Intel Wi-Fi device is used as its only… in 8.1
  • breaking Some SAS2008 controllers need a workaround to get detected since kernel 6.2, see the forum thread for details. in 8.1
  • breaking For certain Linux VMs with OVMF and guest kernels >= 6.5, there might be issues with SCSI disk hot(un)plug. This is a more general issue and is currently being investigated and will be fixed on Linux upstream. in 8.1
  • breaking The TPM (Trusted Platform Module) hardware random number generator (RNG) is now disabled on all AMD systems equipped with a firmware-based TPM (fTPM) device. This change was implemented due to such RNGs causing stutters in many systems. Affected systems should switch the RNG source from /dev/hwrng… in 8.1
  • breaking Some Dell models, which appear to include all those using a BCM5720 network card, have a compatibility issue with the tg3 driver in the kernel based on version 6.5.11. From our current understanding 14th Generation Dell Servers (T140, R240, R640,...) are affected, while others (e.g., R630, R620,… in 8.1
  • breaking Systems installed on top of Debian or those installed before Proxmox VE 7.0 will be switched by default from the ifupdown network configuration implementation to the modern ifupdown2. This switch occurs because the stabilized SDN package is now marked as a recommendation for various Proxmox VE… in 8.1
  • breaking The pve-edk2-firmware package, which provides (U)EFI firmware for virtual machines, has been split up in multiple packages. Users of the fully supported amd64/x86_64 architectures do not need to change anything. The OVMF variants, used for amd64/x86_64 based virtual machines, got moved into… in 8.1
  • breaking With the 8.1 machine version, QEMU switched to using SMBIOS 3.0 by default, utilizing a 64-bit entry point. Since the SMBIOS 32-bit and 64-bit entry points can coexist, and most modern operating systems set up both, the general impact should be minimal However, certain operating systems or… in 8.1
  • breaking api: osd destroy: remove the mclock max iops settings to avoid that it's reused when a new OSD gets the same OSD ID again in 8.0.8
  • breaking api: notification: remove notification groups and filters, they are replaced by a matcher based routing system. in 8.0.8
  • breaking subscription: remove ceph APT auth if invalid in 8.0.7
  • breaking Workaround breaking driver changes in newer Nvidia grid drivers, which prevented mediated devices (mdev) to be reclaimed upon guest exit. in 8.0
  • breaking Add support for new Ceph enterprise repositories. When installing Ceph via pveceph install or the web UI, you can now choose between the test, no-subscription and enterprise (default) repositories. The -test-repository option of the pveceph install command was removed. in 8.0
  • breaking Drop support for Ceph Octopus and Pacific, as they are not supported in Proxmox VE 8. in 8.0
  • breaking Remove overly restrictive validation of public_network during monitor creation. Configuring a public network like 0::/0 or 0::/1 caused a superfluous "value does not look like a valid CIDR network" error. in 8.0
  • breaking Remove the Permission.Modify privilege from the PVESysAdmin and PVEAdmin roles and restrict it to the Administrator role. This reduces the chances of accidentally granting privilege modification privileges. in 8.0
  • breaking Fix an issue where an allowed special ICMP-type could accidentally be added as destination port for a layer 4 protocol, breaking firewall rule loading. in 8.0
  • breaking Outdated pve6to7 compatibility check script was removed. in 8.0
  • breaking Firefox 79 (released on 2020-07-28) in 8.0
  • breaking Chrome/Chromium 85 (released 2020-08-25) in 8.0
  • breaking Safari 14 (released 2020-09-16) in 8.0
  • breaking Storage activation now checks that every content type uses a different directory, in order to prevent unexpected interactions between different content types. This breaks setups in which the content-dirs option was set up to map different content types to the same directory, and setups in which… in 8.0
  • breaking The mkdir option is considered deprecated, it got split into create-base-path and create-subdirs as fine-grained replacement. While Proxmox VE will continue to support this option during the 8.x release series, we recommend switching over to the new options already now. in 8.0
  • breaking Previous 6.2 kernels had problems with incoming live migrations when all of the following were true: in 8.0
  • breaking VM has a restricted CPU type (e.g., qemu64) – using CPU type host or Skylake-Server is ok! in 8.0
  • breaking the source host uses an Intel CPU from Skylake Server, Tiger Lake Desktop, or equivalent newer generation. in 8.0
  • breaking the source host is booted with a kernel version 5.15 (or older) (e.g. when upgrading from Proxmox VE 7.4) in 8.0
  • breaking Kernels based on 6.2 have a degraded Kernel Samepage Merging (KSM) performance on multi-socket NUMA systems. Until we either find a targeted fix for our kernel, or change the default kernel to a 6.5 based kernel (planned for 2023'Q4), the current recommendation is to keep your multi-socket NUMA… in 8.0
  • breaking Depending on the workload this can result in a significant amount of memory that is not deduplicated anymore. in 8.0
  • breaking This issue went unnoticed for a few kernel releases, making a clean backport of the fixes made for 6.5 hard to do without some general fall-out. in 8.0
  • breaking QEMU 8.0 removed some previously deprecated features. Proxmox VE 8 won't use the -chardev tty and -chardev parport aliases anymore, and no other features were used by the Proxmox VE stack. Thus, only installations using args inside their guest configs need to check the compatibility. See the Qemu… in 8.0
  • breaking The removed features in QEMU 8.0 also include the Proxmox VE-specific, but unused/deprecated QMP commands get_link_status, snapshot-drive and delete-drive-snapshot. in 8.0
  • breaking Only root@pam is now allowed to clone and restore guests with passed through PCI/USB devices that are not using the new mapping feature. To allow regular users to clone and restore with PCI/USB devices, create a mapping and give the user 'Mapping.Use' on that. in 8.0
  • breaking Trying to pass through the same PCI device multiple times in a single guest now fails earlier. A qm showcmd for example does not generate an output anymore in that case. in 8.0
  • breaking When passed through device is configured as multifunction (or 'All Functions' in the web UI) with a set mediated device (mdev) this now generates an error instead of a warning. Use the specific function instead. in 8.0
  • breaking cloud-init: If the VM name is not a FQDN and no DNS search domain is configured, the automatically-generated cloud-init user data now contains an additional fqdn option. This fixes an issue where the hostname was not set properly for some in-guest distributions. However, the changed user data will… in 8.0
  • breaking Migration doesn't scan all local storages for orphaned volumes anymore. Instead, only the volumes referenced in the configuration (including snapshots) are picked up. This avoids unexpected errors where an unavailable local storage could fail migration even if no volume referenced that storage. in 8.0
  • breaking The lxc.id_map configuration key has been deprecated for a long time by lxc and was replaced by lxc.idmap. With this release, its presence is considered an error. The key can only be present if it was manually added to a guest configuration. in 8.0
  • breaking The lxcfs is now built with fuse 3. This upgrade is done on a major release, since all running containers need to be restarted afterwards. in 8.0
  • breaking There is a new SDN.Use privilege (and corresponding PVESDNUser role) that is required to configure virtual NICs in guests. See "Access control" section above for details! in 8.0
  • breaking The Permission.Modify privilege has been removed from the PVESysAdmin and PVEAdmin roles, in order to reduce the chances of accidentally granting the privilege to modify privileges. If a particular setup requires a role with this privilege, it is necessary to define a new custom role and use that… in 8.0
  • breaking Users with VM.Allocate/Datastore.Allocate/Pool.Allocate privileges, but without the Permissions.Modify privilege, can now only assign a subset of their own privileges to specific VM/storage/pool paths. Previously they could assign any role to specific VM/storage/pool paths. As the privileges… in 8.0
  • breaking Editing backup jobs now generally requires the Datastore.Allocate privilege on the target storage, and editing backup jobs with dumpdir requires root privileges. in 8.0
  • breaking User accounts will now be locked after too many attempts to authenticate with a second factor. This is intended to protect against an attacker who has obtained the user password and attempts to guess the second factor. Unlocking requires either a successful login with a recovery key or a manual… in 8.0
  • breaking Systems booting via UEFI from a ZFS on root setup should install the systemd-boot-efi package after the upgrade. The systemd-boot was split out from the systemd package for Debian Bookworm based releases. It won't get installed automatically upon upgrade from Proxmox VE 7.4 as it can cause trouble… in 8.0
  • breaking The API can handle array-type data differently, while trying staying backward compatible. Instead of being able to pass the individual elements separated by null bytes, you can pass the data directly as array. in 8.0
  • breaking Before Proxmox VE 8, the API endpoint to trigger a QEMU guest agent (QGA) command execution (/nodes/{node}/qemu/{vmid}/agent/exec) allowed passing a command as a single string, which would then be automatically split at whitespace. This was deemed too brittle and is not supported anymore. You must… in 8.0
  • breaking The Open vSwitch (OVS) version shipped with Proxmox VE 8 / Debian Bookworm contains a bug that causes it to fail to provide a working network when run on a system with 2 CPU cores or less. This is caused by the handler responsible for filling the forward database (FDB) not being started, so… in 8.0
  • breaking In QEMU 7.2, it is a hard error if audio initialization fails rather than a warning. in 7.4
  • breaking With pve-edk2-firmware >= 3.20221111-1 we know of two issues affecting specific set ups: Possible workarounds are to assign more memory or to use kvm64 as the CPU type. The background for this problem is that OVMF << 3.20221111-1 used to guess the address (bit) width only from the available… in 7.4
  • breaking virtual machines using OVMF/EFI with very little memory (< 1 GiB) and certain CPU types (e.g. host) might no longer boot. in 7.4
  • breaking The (non-default) PVSCSI disk controller might result in SCSI disk not being detected inside the guess in regressions. in 7.4
  • breaking Because of hardware errata, the XSAVES feature had to be disabled by the kernel for certain AMD CPUs, resulting in start issues with VMs and certain VM CPU types like EPYC-ROME. in 7.4
  • breaking Virtual Guest Tags: Duplicate tags are now filtered out when updating the tag property of a virtual guest. Duplication detection and sorting is handled case-insensitive by default, all tags are treated lower case. One can change that in the datacenter.cfg configuration using the case-sensitive… in 7.3
  • breaking Handle an edge case where a node would get stuck in fence state, if all services were removed from it before the node actually fenced itself. in 7.2
  • breaking API deprecations, moves and removals in 7.1
  • breaking The /version API method now only returns the console setting of the datacenter config, instead of all settings (use the /cluster/options instead). in 7.1
  • breaking CLI changes in 7.1
  • breaking qm: rename move_disk command to move-disk with an alias for backward compatibility. in 7.1
  • breaking Config file changes in 7.1
  • breaking The /etc/sysctl.d/pve.conf snippet has been moved to /usr/lib/sysctl.d/10-pve.conf, in accordance with current recommendations (see sysctl.d(5)). Local modifications need to be re-enabled again - they are preserved in /etc/sysctl.d/pve.conf.dpkg-old). in 7.1
  • breaking Two-Factor Authentication: in 7.1
  • breaking Keys stored by admins in the user entry (this is how it worked back before the users could add TOTP and U2F keys themselves, and how it worked for Yubico OTP until now) are now deprecated. in 7.1
  • breaking The two-step login procedure in the API has been changed to work like in the Proxmox Backup Server. For now, the new procedure is opt-in and the old one still works, but is deprecated. in 7.1
  • breaking Access Control: You can integrate external authorization servers, either using existing public services or your own identity and access management solution, for example, Keycloack or LemonLDAP::NG. See breaking changes below for some possible impact in custom created roles. in 7.0
  • breaking Containers: The force parameter to pct migrate, which enabled the migration of containers with bind mounts and device mounts, has been removed. Its functionality has been replaced by marking the respective mount-points as shared. in 7.0
  • breaking The outdated, deprecated, internal DRBD Storage plugin has been removed. A derived version targeting newer DRBD is maintained by Linbit[footnotes 7.0 1]. in 7.0
  • breaking Pool permissions in 7.0
  • breaking VZDump in 7.0
  • breaking Hookscript: The TARFILE environment variable was deprecated in Proxmox VE 6, in favor of TARGET. In Proxmox VE 7, it has been removed entirely and thus, it is not exported to the hookscript anymore. in 7.0
  • breaking The size parameter of vzdump has been deprecated, and setting it is now an error. in 7.0
  • breaking API deprecations, moves and removals in 7.0
  • breaking The upgrade parameter of the /nodes/{node}/(spiceshell|vncshell|termproxy) API method has been replaced by providing upgrade as cmd parameter. in 7.0
  • breaking The /nodes/{node}/cpu API method has been moved to /nodes/{node}/capabilities/qemu/cpu in 7.0
  • breaking The /nodes/{node}/ceph/disks API method has been replaced by /nodes/{node}/disks/list in 7.0
  • breaking The /nodes/{node}/ceph/flags API method has been moved to /cluster/ceph/flags in 7.0
  • breaking The db_size and wal_size parameters of the /nodes/{node}/ceph/osd API method have been renamed to db_dev_size and wal_dev_size respectively. in 7.0
  • breaking The /nodes/<node>/scan/usb API method has been moved to /nodes/<node>/hardware/usb in 7.0
  • breaking CIFS credentials have been stored in the namespaced /etc/pve/priv/storage/<storage>.pw instead of /etc/pve/<storage>.cred since Proxmox VE 6.2 - existing credentials will get moved during the upgrade allowing you to drop fallback code. in 7.0
  • breaking The external storage plugin mechanism had a ABI-version bump that reset the ABI-age, thus marking an incompatible breaking change, that external plugins must adapt before being able to get loaded again. in 7.0
  • breaking qm|pct status <VMID> --verbose, and the respective status API call, only include the template line if the guest is a template, instead of outputting template: for guests which are not templates. in 7.0
  • breaking qm vncproxy now always requires a password to be set via the LC_PVE_TICKET environment variable. in 7.0

Security changes

  • security Fix a boot issue for Windows guests with Virtualization-based Security (VBS) enabled by disabling the cet-ibt and cet-ss CPU flags. in 9.2
  • security Prevent local "copy.fail" privilege escalation exploit via AF_ALG sockets within containers by using seccomp filtering (PSA-2026-00018-1). If AF_ALG support is required in a specific container, see the security advisory forum post for more details. in 9.2
  • security Fine-grained control of nested virtualization for VM guests. Some VM guest workloads need access to the host CPU's virtualization extensions for nested virtualization. Examples are nested hypervisors or Windows guests with Virtualization-based Security enabled. The host CPU type makes all CPU… in 9.1
  • security Backport a fix for an out of bounds read vulnerability in libtpms, a library for integrating TPM functionality into QEMU (PSA-2025-00010-1). in 9.0
  • security Containers are now created as unprivileged containers by default. This was already the default when creating containers via the GUI, and it is now also the default when creating containers via API and CLI. Privileged containers lack security features and should only be used in trusted… in 9.0
  • security Fix security issues concerning image formats that would allow sufficiently privileged attackers read or read-write access to arbitrary host files. See PSA-2024-00014-1, PSA-2025-00001-1, PSA-2025-00003-1, PSA-2025-00004-1. in 8.4
  • security OVA/OVF import: Fix a security issue that would allow a sufficiently privileged attacker to obtain a copy of an arbitrary host file by importing a specifically crafted OVA appliance (PSA-2024-00013-1). in 8.4
  • security Skip generating rules in forward chains for security groups bound to an interface, instead of causing an error. Rules in the forward chain operate on multiple interfaces, and binding them to an interface does not make sense. in 8.4
  • security Several vulnerabilities in GRUB that could be used to bypass SecureBoot were discovered and fixed (PSA-2025-00005-1) The Documentation for SecureBoot now includes instructions to prevent using vulnerable components for booting via a revocation policy. in 8.4
  • security The selector for security groups now shows a tooltip for comments that are too long to fit within the column width (issue 5879). in 8.3
  • security Fix a security issue where an authenticated user with necessary privileges can trick the system into accessing arbitrary host block devices, including passing them through into guests as a volume. in 8.3
  • security Fix a security issue where authenticated attackers with Sys.Audit or VM.Monitor privileges could download arbitrary host files via the API. See PSA-2024-00009-1 for details. in 8.3
  • security Fix a RCE vulnerability in the shim bootloader used for Secure Boot support. See PSA-2024-00007-1 for details. in 8.3
  • security fix #5879: ui: add tooltip to security group comments in 8.2.9
  • security Firewall security groups can now be renamed with the changes directly being picked up from pve-firewall in 7.3
  • security Improved input sanitization of API URLs as additional security layer. in 7.3
  • security Support for security keys (like YubiKey) as SSH keys, when creating containers or preparing cloud-init images. in 7.0
  • security Resolving the Ceph `insecure global_id reclaim` Health Warning With Ceph Octopus 15.2.11 and Ceph Nautilus 14.2.20 we released an update to fix a security issue (CVE-2021-20288) where Ceph was not ensuring that reconnecting/renewing clients were presenting an existing ticket when reclaiming their… in 6.4

Deprecations

  • deprecated Switch from the deprecated block-job-complete to the newer job-complete QMP command. in 9.2
  • deprecated Deprecate and warn about raw cgroup v1 entries in the container configuration. The support for cgroup v1 will be removed in a future release. in 9.2
  • deprecated Switch from the deprecated /etc/timezone to the recommended timedatectl to initialize the containers timezone setting (issue 7175). in 9.2
  • deprecated Deprecate the legacy starttime and dow parameters of the backup job API in favor of schedule. The legacy parameters were superseded by schedule since Proxmox VE 7.1 and have now been removed from the API response. in 9.2
  • deprecated api: backup: deprecate the legacy 'starttime' and 'dow' parameters in favor of 'schedule' and drop them from the API response, as they have been superseded since PVE 7.1. in 9.1.8
  • deprecated fix #7175: replace deprecated /etc/timezone handling with systemd timedatectl. in 9.1.7
  • deprecated api: workaround broken 'maxworkers' alias in bulk actions api calls. For the new, cluster-wide bulk actions, only the 'max-workers' spelling would have an effect. For the pre-existing node-specific bulk migration, an error would occur when specifying the deprecated 'maxworkers' spelling, causing… in 9.1.3
  • deprecated rrdtool is rebuilt to provide a native systemd unit file. The ListenStream directive was updated to not print a deprecation warning by using /run as directory for the socket. in 9.1
  • deprecated Clarify the handling of QEMU machine version deprecations. Starting with QEMU 10.1, machine versions will be removed from upstream QEMU after six years. Proxmox VE will support machine versions from approximately two previous major Proxmox VE releases. This is now documented, and QEMU will warn… in 8.4
  • deprecated Avoid passing the deprecated noacl mount option for ext4 formatted volumes (issue 4846). in 8.2
  • deprecated Deprecate notification options that were only relevant in a short transition period before the final notification system was introduced. in 8.2
  • deprecated Restrict the values of legacy user-keys to the ones that were allowed in the deprecated initial TFA system. in 8.2
  • deprecated Log a warning when starting a VM with a deprecated machine version. in 8.1
  • deprecated Mark global pg_bits setting as deprecated and make it a no-op. The setting has been deprecated since Ceph 13. in 8.1
  • deprecated ceph: mark global pg bits setting as deprecated in 8.0.8
  • deprecated api/acme: deprecate 'tos' endpoint in favor of new, more general, 'meta' one in 8.0.8
  • deprecated Replace usages of deprecated -no-hpet QEMU option with the hpet=off machine flag. in 8.0
  • deprecated The rsync invocation used when joining nodes via ssh, which is deprecated, has been adapted to changes in rsync CLI argument parsing in Bookworm. in 8.0
  • deprecated The access/ticket API endpoint does not support the deprecated login API (using new-format=0) anymore. in 8.0
  • deprecated The maxfiles parameter has been deprecated in favor of the more flexible prune-options. in 7.0
  • deprecated Default to the modern ifupdown2 for new installations using the Proxmox VE official ISO. The legacy ifupdown is still supported in Proxmox VE 7, but may be deprecated in a future major release. in 7.0

Every release in between

9.2.7 Aug 2, 2026
featureceph: when installing, offer only the Ceph releases that have packages for the node's architecture, from a new per-node API endpoint instead of a hardcoded list, so an arm64 node no longer lists releases without an arm64 build.
othersubscription: bind keys to a CPU architecture; arm64 keys carry an explicit marker, and a key that does not match the node's architecture is rejected in the API and CLI and flagged early in the web interface.
othercontainers: show the appliance template architecture in "pveam available" and the template selector, and point out when it differs from the node it would run on.
fixfix #7187: add the ethtool output for physical network interfaces to the system report, to help debug link and offloading issues.
featureadd tooltips describing the acceleration modes to the VM CPU flag selector.
otherpvesh: support API paths whose parameters are described through composed 'allOf' or 'oneOf' schemas, which the HA rules endpoints use as of libpve-common-perl 9.1.21, so that their options keep being accepted.
9.2.6 Jul 31, 2026
otherfabrics: wireguard: node edit: use network selector for internal nodes, making the semantics of the field more obvious, and entering values less error-prone and manual.
otherapi: apt: versions: track proxmox-enterprise-support-keyring version
featureui: ha: node affinity: refactor and extend UI, allow configuring "positive" or "negative" affinity rules. negative affinity allows declaring nodes on which HA resources must not (strict rule) or should not (non-strict) run on.
featureui: ha: resource affinity: add hint for affinity type config value, mapping "positive" to "Keep Together", and "negative" to "Keep Separate", like the create/edit dialogue already did before.
otherui: ceph: pool: set target ratio to 0 when the value is not set, to explicitly clear the value instead of not sending the value to the backend and keeping the previous value set.
9.2.5 Jul 15, 2026
featureceph: add guided rolling-restart for Ceph daemons, available both from the API and the web interface, so operators can safely cycle all OSDs, monitors, managers or metadata servers of a cluster after a configuration or kernel change without hand-rolled scripts. Each step waits for the previous…
fixceph: osd: drop two obsolete cleanup workarounds now handled elsewhere: Ceph itself runs 'pvremove' while zapping an OSD, so our own call could fail on an already-removed physical volume, and the udev trigger worked around a systemd bug fixed long ago.
otherceph: skip re-broadcasting the Ceph service status to the cluster file system on every pvestatd cycle when nothing changed, avoiding needless pmxcfs writes.
fixfix #6948: ui: ceph: configuration database: automatically show the MASK column once any entry uses a mask, so masked settings such as 'osd/class:hdd' are no longer indistinguishable from cluster-wide ones.
fixui: sdn: fabrics: fix adding and editing BGP unnumbered interfaces, which carry no per-interface IP address. The IPv4 column is now optional and stale 'ip'/'ip6' properties are no longer submitted, which previously made the backend reject the interface as not defined in the schema.
otherapi: sdn: avoid a double slash in delete request URIs, which a strict firewall or proxy could reject even though the server normalizes it.
fixfix #7460: ui: sdn: point the BGP and IS-IS controller help buttons to their own documentation sections instead of the EVPN one.
otherui: VM boot order: hint that OVMF (UEFI) guests need a virtual RNG device for PXE network boot to work.
otherui: VM vCPU: drop the artificial upper limit on the socket count in the edit dialog, matching the backend which imposes none.
featurepostinst: add kernel NBD devices to the global LVM filter on new installations, to avoid clashes with volume groups on NBD-mapped external disks, for example nested Proxmox VE systems or disks accessed by external backup providers.
otherupdate shipped appliance info index.
9.2.4 Jun 29, 2026
fixfix #4130: external metric server: keep node status updates flowing when a TCP metric server is unreachable. A failed connection previously raised an unhandled exception that aborted the whole node status update, so storage and guest status indicators in the UI eventually turned gray.
fixfix #6348: ui: bulk action: render the resource tags in the selection list using the configured tag style instead of plain text.
featureui: node: show the system log in a structured journal view that colors entries by syslog priority and adds server-side filters for the minimum priority, a systemd unit, a syslog identifier and kernel-only messages, with autocompletion for the unit and identifier filters.
otherui: node: open a service's log in that structured journal view, scoped to the service's systemd unit, instead of as plain text.
otherui: VM CPU flag selector: replace the per-flag radio group and the separate read-only state column with a single Off/Default/On segmented button that both shows and sets the state, and re-enable column sorting.
otherui: custom CPU model: validate the name in the creation dialog against the allowed config-ID format, rejecting invalid names in the frontend instead of only after the backend refuses them.
fixui: sdn: fabrics: fix editing a node interface that already has an IPv6 address, which did not show up and failed to submit because the field was named 'ipv6' instead of the 'ip6' the schema expects, and label the interface address column 'IPv4' instead of the ambiguous 'IP'.
fixui: fix the QEMU version comparison behind the dynamic USB port limit, which wrongly required the minor version to also be greater or equal even when the major version was already newer, so the higher USB port count for capable machine and OS types was not offered.
otherui: stop displaying a misleading 0% disk usage for VMs in the resource views; the field is left empty again, as VM disk usage is not currently queried from the guest agent.
9.2.3 May 24, 2026
featureui: storage content: show the owning guest of a volume and add an action to jump to it.
otherapi schema: cluster options: declare the actual return schema type.
9.2.2 May 21, 2026
featuresdn: fabrics: wireguard: drop the separate endpoint-port field added to the node-edit window in 9.1.19. The underlying schema change in proxmox-ve-config has been reverted: the endpoint now stores only the host, and the connect port is derived from the referenced interface's listen_port at…
featuresdn: fabrics: tighten the fabric and node configuration forms: require at least one prefix, hide node address fields for prefix families that are not configured on the fabric, and disable prefix editing once nodes have been added (since changing the prefix would invalidate existing nodes).
otherui: VM CPU flag selector: disable column sorting as a stop-gap, since sorting and then editing a flag could leave the radio-button widgets in moved rows showing the wrong selected state.
9.2 May 21, 2026 Release notes ↗
featureLatest 7.0 Kernel as new stable default
featureDynamic Load Balancing with the Cluster Resource Scheduler (CRS). In dynamic scheduling mode, the CRS uses real-time node and guest resource utilization metrics to balance HA-managed guests. The new load balancer can automatically migrate HA-managed guests to lower the overall node imbalance…
featureNumerous improvements to the Software Defined Networking (SDN) stack: Add WireGuard and BGP as new fabric protocols. Add support for route maps and prefix lists for fine-grained BGP/EVPN route filtering. Further additions include route redistribution for OSPF fabrics, additional options for…
featureManagement of custom CPU models from the web interface. A new section in the Datacenter → Guest Resources/Hardware allows creating, editing, and removing custom CPU models from the web interface. Custom CPU models allow tailoring the virtual CPU exposed to VMs to a specific set of features. The VM…
featureDisarm and arm HA for safer cluster maintenance. The HA stack can now be disarmed cluster-wide via the new disarm-ha and arm-ha CRM commands. This allows for planned, cluster-wide maintenance work, such as changes in the cluster network, without triggering any node fencing events. The HA resource…
featureKernel 7.0 as new stable default.
featureCeph Tentacle 20.2.1 is available as stable option.
featureExpose the parallel worker count for all bulk actions, not only for bulk migrations. An empty value falls back to the new auto default, which preserves backwards-compatibility with older nodes in a mixed-version cluster.
featureMake several improvements to the task viewer:
featureAdd a Download button to download a task log directly without opening the full task viewer popup (issue 7087).
featureDerive the task end-time from the polled task status if the caller did not provide it, ensuring finished tasks show the correct duration.
featureMake various improvements to the login flow:
featurePreserve deep-link fragments (e.g. /#vNNN) across an OpenID Connect login to make users land on the requested resource (issue 7337).
featurePrevent the realm selection from being changed on the login page as a side-effect of unrelated user creation (issue 7149).
featureReset the UI state on automatic logout to protect users who share a workstation.
featureAllow creating snapshots and backups directly from the resource tree context menu (issue 6209).
featureImprove the rendering of nested pools in the resource view by grouping the child pools under their parent pool.
featureAdd an architecture column to the resource store, enabling other views to display the architecture of a node.
featureFix the OSD toolbar overflowing on narrow viewports.
featureFix the CephFS page not being scrollable when multiple MDS are configured (issue 6234).
featureFix sorting of the Two-Factor Authentication (TFA) column in the datacenter, permission, and user grids (issue 7191).
featureFix the network section being unavailable in the folder view (issue 7125).
featureImprove the "Confirm Remove" dialog layout to properly accommodate larger fields and components.
featureAllow creating network bonds without specifying the bond-primary option to match the backend, which treats the value as optional (issue 4911).
featureUse the correct IANA timezone name Europe/Kyiv in the timezone selector (issue 7141).
featureSmaller fixes and improvements:
featureFix parsing of property strings whose values contain an equals sign.
featureTrim trailing whitespace from custom filenames when downloading ISOs, so the file extension is recognized correctly.
featureInclude Linux Kernel 7.x in the version range for the VM OS selector.
featureFix a typo in a translated OVMF-related error message.
securityFix a boot issue for Windows guests with Virtualization-based Security (VBS) enabled by disabling the cet-ibt and cet-ss CPU flags.
deprecatedSwitch from the deprecated block-job-complete to the newer job-complete QMP command.
breakingRemove redundant checks for USB hotplug support and unplug events during unrelated VM configuration changes.
deprecatedDeprecate and warn about raw cgroup v1 entries in the container configuration. The support for cgroup v1 will be removed in a future release.
securityPrevent local "copy.fail" privilege escalation exploit via AF_ALG sockets within containers by using seccomp filtering (PSA-2026-00018-1). If AF_ALG support is required in a specific container, see the security advisory forum post for more details.
deprecatedSwitch from the deprecated /etc/timezone to the recommended timedatectl to initialize the containers timezone setting (issue 7175).
deprecatedDeprecate the legacy starttime and dow parameters of the backup job API in favor of schedule. The legacy parameters were superseded by schedule since Proxmox VE 7.1 and have now been removed from the API response.
breakingWindows VMs using machine versions 11.0 or 11.0+pve1 are potentially affected by this issue. Such guests may have been created with the packages available in the Proxmox VE 9.2 ISO or qemu-server older than 9.2.0. Upgrading the qemu-server package and setting the machine version to 11.0+pve2 or…
breakingWindows VMs using machine version 11.0+pve2 or newer are not affected by this issue. Under qemu-server 9.2.0 or later, new Windows VMs are created with an unaffected machine version.
breakingWindows VMs using machine versions older than 11.0 are not affected if using qemu-server 9.2.0 or newer.
+143 more items in the release notes
9.1.19 May 20, 2026
otherui: sdn: fabrics: wireguard: present the endpoint port as a separate field in the node edit window, defaulting to the standard WireGuard port 51820, rather than expecting a host:port value in a single endpoint field.
fixui: sdn: fabrics: fix an error when adding a route redistribution rule.
9.1.18 May 19, 2026
otherui: VM CPU flag editor: present the active acceleration as a 'Showing flags for KVM/TCG' label in the flag grid's bottom toolbar, replacing the permanently-visible hint that previously sat below the grid. Also fix scrolling glitches that could leave rows partially rendered, and make the CPU flags…
othercustom CPU models: reject create and edit requests that omit the base reported model, which is structurally required.
otherui: ceph osd: show the dm-crypt encryption status in the OSD details modal; the underlying OSD details endpoint now reports it too.
fixapi: ceph fs: expose the CLI handler for destroying a CephFS also a REST endpoint. Currently this still not exposed in the web UI. Also return all data pools and pool IDs in the filesystem listing, and fix a parameter name on the early add-storage check during create.
fixapi: ceph: broad return-schema correctness pass across the OSD, pool, monitor, manager, MDS, configuration, and node indexes: emit real JSON booleans for flags previously rendered as strings, declare missing return fields with property descriptions, drop a dead duplicated permissions key, omit the…
otherui: sdn: vnet edit: mark the tag field as required for zones that need it, disable rather than hide fields that do not apply for the chosen zone type, and explicitly delete fields that are no longer applicable upon submission.
fixui: sdn: route map and prefix list edit: fix alignment of value cells in the add/edit dialog, use a more consistent style for the match/set grid, make ID and order required, and add online help links.
fixsdn: fabrics: fix populating the WireGuard node 'Allowed IPs' field from existing config.
fixui: lxc create wizard: fix recent regression with the default rootfs disk being missing on fresh wizard opens.
otherui: wizard: increase wizard dimensions from 720x540 to 760x570 to give denser panels like the CPU flag list editor more room while keeping the 4:3 ratio.
otherui: datacenter menu: drop the 'guest resource' grouping and clean up the item list.
featureui: ceph wizard: drop the preview marker for Ceph Tentacle, it's the new stable default.
otherpve8to9: avoid logging a failure when the old kernel metapackages are no longer installed.
9.1.17 May 18, 2026
othernetwork-interface-pinning: write '.link' files with the product-neutral '50-pmx-' prefix and remove legacy '50-pve-' siblings on write, so they no longer collide with installer-written entries.
9.1.16 May 18, 2026
fixfix #6819: storage content view: handle the new 'approximate-size' field returned for inactive qcow2 LVs on LVM by rendering them with a leading '~' marker in the Size column, falling back to 'Unknown' when neither exact nor approximate size is set. Size column sorting remains numeric.
fixpve8to9: accept Proxmox kernels 7.0 and 6.17 as suitable in the upgraded-host checks, matching the default kernel switch in PVE 9.1 (6.17) and the upcoming switch to 7.0. Also fix the X.Y-pve fallback comparison that wrongly rejected 7.0-pve, and reduce noise from per-candidate not-installed probes.
featureui: sdn: improve UX for the wireguard interface dialogs: skip the delete-confirmation prompt for not-yet-saved entries, avoid a brief flicker when opening dialogs, and improve the empty state of the node-edit dialog when no interfaces have been added yet.
featureui: sdn fabric: add onlineHelp links to the node-edit dialogs.
featureui: sdn: route map panel: add 'tag' as a match statement, accepting integer tag values from 0 (matching untagged routes) up to 2^32-1, in line with FRR's 'match tag' clause.
otherd/control: depend on proxmox-enterprise-support-keyring to ensure the Proxmox support keyrings are available (in deactivated state) on PVE installations.
9.1.15 May 18, 2026
featureui: cpu models: add a new Datacenter > Custom CPU Models panel for cluster-wide CRUD of custom CPU model definitions: base model, vendor, physical address bits, hide-hypervisor, Hyper-V vendor ID, and per-flag toggles. Access is gated by Mapping.{Audit,Use,Modify} on /mapping/cpu/; assigning a…
featureui: cpu flags: add a flag editor grid used by both the new custom CPU model dialog (full view, with free-text search over name and description, an accel kvm/tcg selector, and a per-node multi-select filter) and the VM Processor edit dialog (restricted to the flags that may be set per VM). Flags…
featureui: vm processor edit: list custom CPU models alongside built-ins in the type selector, allow filtering out PVE-internal abstract profiles (x86-64-v2/v3/v4/v2-AES), and align the custom-CPU permission warning with the new Mapping ACL.
otherapi: capabilities: advertise the qemu/cpu-flags subroute in the qemu capabilities index so pvesh and other tree-walkers see it.
featureui: sdn: add support for the new BGP fabric protocol, configuring eBGP unnumbered peering with per-node ASN, optional BFD, prefix-list route filters, route maps, and redistribution. The interface panel omits the IP column since unnumbered interfaces carry no IPs.
otherui: ha: crs: auto-load the auto-rebalance settings dialog when opened from the HA status panel; previously it opened with blank fields and a Save would have overwritten the live config. Also display the hold- duration default via defaultText to match the other fields.
fixfix #7599: ui: vm create wizard: defer the first disk addition until the initial nodename is set, so adding a second CD-ROM drive for Windows virtio drivers correctly switches the disk controller from IDE to SCSI.
fixfix #3936: ui: storage: zfs: validate the blocksize field at form-edit time, enforcing a power-of-two between 512 bytes and 16 MiB with an optional 'k' or 'm' suffix.
9.1.14 May 16, 2026
fixfix #5076: ui: dc: add an optional 'audiences' field for OpenID realms, allowing the additional OIDC audiences a token may carry to be accepted.
othersdn: wireguard: stop disabling the name field when creating an external node, which had blocked external WireGuard node creation entirely.
othernetwork: drop the apply flag when generating the WireGuard config, avoiding an error when applying a configuration with newly created interfaces.
fixsdn: wireguard: fix rendering the peer list in Chromium-based browsers, which previously only worked in Firefox due to a race between setting available and selected peers.
featureui: ha: configure the CRS auto-rebalance imbalance threshold and minimum improvement margin in percent (0-100) to match the percent representation already used in the HA panel status. NOTE: previously configured fractional values must be multiplied by 100 to keep the same behavior; this only…
featureui: ha: add a CRS Settings shortcut button to the HA panel toolbar that opens the existing scheduling settings dialog directly, to improve discoverability without duplicating the settings tree.
9.1.13 May 15, 2026
otherapi: hardware: pci: use NVML for querying mediated device information on NVIDIA GPUs, exposing details that the standard sysfs mdev interface does not surface.
featurenode config: add an optional 'location' property holding a name and a latitude/longitude pair, settable per node. Lets management systems like Proxmox Datacenter Manager query and display a host's geographic position, for example on a world map, with per-node overrides on top of the cluster-wide…
featureui: expose the new 'Location' option in both the datacenter and node option views, using the location edit widget and renderer from the widget toolkit.
featureui: ha: resources: add an 'Auto-Rebalance' per-resource flag (default on) that controls whether an HA resource may be migrated during automatic rebalancing, with a matching grid column and status entry.
fixfix ui: sdn: evpn and bgp controller: do not send empty 'route-map-in' or 'route-map-out' values on create, which previously made creating a BGP or EVPN controller without any route map fail.
otherceph: switch the default release for fresh installs from Squid (19.2) to Tentacle (20.2) and drop its experimental gating. Existing clusters are unaffected, as the install wizard's cluster-version probe overrides the default with whatever release the cluster already runs; only the pre-selection on…
othersubscription: adapt to multiple server ID candidates: reuse an existing recorded server ID if it still matches one of the candidates, otherwise fall back to the first candidate. Keeps subscription handling working on hosts where the server ID identification can produce more than one value.
featuretighten qemu-server to >= 9.1.11 for the improved mdev support, libpve-rs-perl to >= 0.14.0 for the new subscription server-ID handling, proxmox-widget-toolkit to >= 5.2.1 for the location edit widget and renderer, and libpve-network-perl and libpve-network-api-perl to >= 1.5.1.
9.1.12 May 15, 2026
breakingui: sdn: fabrics: add management UI for the new WireGuard fabric protocol. New panels under Datacenter > SDN > Fabrics let users create and edit WireGuard interfaces with their peer references on internal nodes, manage external peer definitions, and review per-node available peers. Public keys,…
featureui: sdn: fabrics: ospf: add a per-interface network-type selector (Broadcast, NonBroadcast, PointToPoint, PointToMultipoint), exposing the new fabric API field. Previously the network type was inferred implicitly from whether the interface had an IP, leaving users no way to override it.
featureui: sdn: fabrics: ospf: add a redistribution grid for importing routes from other protocols (connected, kernel, static, ...) into OSPF, with a route-map selector per source.
featureui: sdn: evpn: zone and controller: expose new advanced fields (peer-group-name, nodes, BGP mode, eBGP multihop on the controller; additional controllers on the zone) to the UI.
otherui: always load SDN navigation entries. Previously they were hidden behind a tech-preview gate that rejected the dynamic feature probe when any optional SDN module was not yet available on the cluster, which has not been the intended behaviour for a while now.
fixui: fix parsing of property-strings when values contain an equals sign. The previous logic relied on String.split's limit parameter, which silently truncated values rather than stopping the split, so base64-padded values and similar got cut off at the first =.
othernetwork: sdn: trigger WireGuard config generation on apply, which emits per-interface configuration into /etc/wireguard/proxmox and syncs running interfaces via wg(8) syncconf if wireguard-tools is installed.
featureui: lxc: mountpoint edit: expose the new idmap option for mapping user/group IDs on a per-mountpoint basis, and drop a duplicate mp assignment in the same panel.
featureui: ha: add a button on a HA-managed guest's resource grid to disarm/re-arm it without removing the HA configuration, useful for temporarily skipping HA management during maintenance.
otherui: migrate: display the precondition messages for HA node-affinity rules when they constrain the migration target, so users see why a specific node cannot be picked.
otherui: sdn: title-case existing button and field labels for consistency with the rest of the UI.
featuretighten libpve-network-perl and libpve-network-api-perl dependencies to 1.5.0 and pve-container to 6.1.6 for the new WireGuard fabric, the OSPF redistribute and network-type API surface, and the LXC idmap option.
9.1.11 May 12, 2026
featureui: sdn: introduce management UI for the new prefix list and route map configuration entities. Adds dedicated panels under Datacenter > SDN for creating, editing, and removing prefix lists and route map entries, with explicit sequence numbers for prefix list entries and full match/set/exit-action…
featureui: qemu: wizard: re-add media=cdrom for the optional second VirtIO drivers ISO. The recent OS-type panel split lost the onGetValues hook that appended this on creation, which made adding the secondary ISO fail for Windows guests.
featureui: add default pgettext() and npgettext() implementations to the index template, avoiding UI breakage when no language file has been loaded yet. These functions are required for the context-aware translations support recently added to the proxmox-i18n tooling.
9.1.9 Apr 21, 2026
otherui: ha: status: handle the 'fencing' entry when ordering the grid, so it no longer bounces around between API requests on some browsers. Place it directly after 'quorum' for quick visibility.
fixapi: apt package versions: fix typo in libpve-notify-perl package name, which caused the package to be missing from the versions list.
fixfix #6234: ui: ceph: make the CephFS page scrollable along the Y-axis, so entries stay reachable on clusters with multiple MDS.
otherapi: vnc/termproxy: bind VNC and SPICE tickets to the listen port to harden authentication for interactive console sessions.
otherapi: vncproxy: always use a freshly generated password when authenticating via the VNC protocol, improving entropy compared to the previous ticket-derived scheme.
otherapi: termproxy: pin the accepted ticket in the spawned termproxy process as an additional defense-in-depth measure.
featuresdn: add a dry-run diff view to the SDN apply action, showing the upcoming FRR and ifupdown2 configuration changes before the user commits them.
otherupdate shipped appliance info index.
9.1.8 Apr 2, 2026
featureui: datacenter options: add dynamic load scheduler and auto rebalancing configuration for HA cluster resource scheduling, including threshold, hold duration, margin, and method settings.
deprecatedapi: backup: deprecate the legacy 'starttime' and 'dow' parameters in favor of 'schedule' and drop them from the API response, as they have been superseded since PVE 7.1.
featureapi: backup: add return schema for backup job endpoints.
othersystem report: adapt to ZFS 2.4.0 renaming arcstat to zarcstat.
9.1.7 Mar 27, 2026
otherui: qga: rename freeze-fs-on-backup checkbox to freeze-fs, reflecting that filesystem freeze/thaw now also applies to snapshots and replication, not just backups.
otherui: qemu: hardware: efi: suggest enrolling UEFI 2023 certificates from Microsoft when pre-enrolled keys are present but the 2023 certs are missing, as the 2011 certificates expire mid-2026.
deprecatedfix #7175: replace deprecated /etc/timezone handling with systemd timedatectl.
fixfix #7337: ui: preserve deep link hash on OpenID login redirect, so users are directed to the intended page after authentication.
fixceph: osd: fix bootstrap keyring creation when auth_client_required is not set in ceph.conf, defaulting to 'cephx' to match Ceph's own default.
fixfix #7011: ceph monitor: set ownership of monitor logs to ceph:ceph after creation, so logging works on freshly set up clusters without waiting for a ceph-common upgrade.
fixfix #7386: ui: vm memory: fix compatibility with Firefox ESR 115 by avoiding ES2025 Iterator.toArray, as we target ES2024 for the Trixie based releases.
fixfix #7191: ui: correctly sort TFA column in the PVE user list.
featureapi: cluster resources: add missing 'shared'-storage flag to return schema, required by the proxmox-datacenter backend.
otherui: download iso: trim filename to correctly detect file extension when a custom filename has trailing spaces.
fixui: ceph: fix pool edit dialog sometimes showing incorrect size and min_size values due to a race condition, which could lead to unintended replication setting changes on save.
fixui: ceph: osd: fix toolbar overflow on small screens by enabling horizontal scrolling.
fixfix #7300: ui: acl: include pre-generated SDN zones and fabrics in the permission path selector.
9.1.6 Feb 12, 2026
featureui: lxc/MPEdit: add "keepattrs" flag
9.1.5 Jan 27, 2026
otherui: display: update 'live-migration with VNC-clipboard not working' note.
otherpveceph setup: warn if experimental release is selected with (default) enterprise repo.
otherpveceph setup: prompt switch from enterprise to test repo for experimental release.
featureceph: add Ceph 20.2 Tentacle as available (preview) release.
fixfix #7149: ui: user create: do not leak changing the realm for a new user into the pre-selected realm of the currently logged in user, as that might cause some UX friction and confusion on their next login.
otherui: fully reset UI state on automatic logout due to stale ticket (e.g., after resuming a computer from longer suspend), as just showing the login mask on top of the current state might be a bit confusing.
fixui: utils: fix OVMF typo in error message translation.
otherupdate shipped appliance info index to current CDN state.
fixfix #7229: bulk actions: refresh pmxcfs infos between processing each guest to ensure any changes in-between, like from a hook script, are visible for successive starts.
otherhttp server: unify error message in case of authentication failure due to wrong credentials.
otherui: resource tree: don't show empty grouping nodes as expandable.
otherui: resource tree: show nested pools as actual child nodes of their parent pool and in turn drop rendering their parent path prefix.
9.1.4 Dec 22, 2025
otherapi: apt changelog: check for odd package name and ensure arguments are separated from options.
9.1.3 Dec 12, 2025
fixui: ceph install wizard: fix typo.
featureclose #6209: ui: allow creating snapshots and backups from the context menu.
featureui: improve some translatable strings and add some context for translators.
otherui: bulk actions: don't try to reset non-existing 'vmidfilter', which would cause an error in the browser console.
otherd/postinst: drop now obsolete apt-auth.conf migration. It was required after upgrading from Proxmox VE 7 to 8. A direct upgrade from Proxmox VE 7 to 9 is not possible, so it's obsolete.
fixfix #7125: ui: fix loading network section in folder view. Navigating to the 'Network' section would fail with a browser error, because of a missing reference to the documentation.
otherpve-sdn-commit: run for vlan/qinq zones on non-vlan-aware bridges. When using non-vlan-aware bridges for the VLAN or QinQ zones, it is necessary to regenerate the SDN configuration when the name of the physical NIC might have changed. In particular, this fixes issues in combination with pinning…
deprecatedapi: workaround broken 'maxworkers' alias in bulk actions api calls. For the new, cluster-wide bulk actions, only the 'max-workers' spelling would have an effect. For the pre-existing node-specific bulk migration, an error would occur when specifying the deprecated 'maxworkers' spelling, causing…
otherui: storage oci pull: optimize regular expression for the reference to avoid catastrophic backtracking potentially causing hangs in the dialog window.
9.1.2 Nov 29, 2025
otherpve8to9: improve message for TLS checks in relation to different key bit size for RSA or ECC based keys.
breakingfix #2077: pvenode: drop dependency on GNU readline Perl module in favor of our own PTY module. While it's less flexible, it's much simpler and robust, and–more importantly–it has no issues with being instantiated more than once, which recently became an error in the readline module, breaking EAB…
otherapi: bulk actions: use kebab-case for 'max-workers' parameter with alias to old 'maxworkers' spelling for backwards compatibility.
otherapi: cluster bulk actions: fall-back to datacenter.cfg for max-workers.
otherapi: cluster bulk actions: increase default worker from 1 to 4 for start, stop & suspend actions.
otherapi: cluster bulk actions: define minimum of 1 and a maximum of 64 for max-workers parameter.
featureapi: node bulk action: add max-worker parameter to stop and suspend actions to allow overriding through API.
otherapi: node bulk action: improve the cpu-thread-count derived max-worker fallback, which is used when neither an API parameter nor an max_worker setting in the datacenter config is set. Ensure that there is always one core left over for the system and use maximum of 8 workers.
featureapi: node bulk start: implement concurrent workers and add max-worker API parameter.
otherapi: node bulk migrate: set maximum of max-worker parameter to 64.
otherui: bulk action window: give box-label hint for force-stop checkbox more space.
featureui: bulk action window: add max-workers field to all actions.
otherui: bulk action window: adapt to lowered upper-limit for migrate max-worker.
otherpveupdate: do not try to update subscription when using offline key.
9.1.1 Nov 18, 2025
featureui: storage: oci registry pull: make parsing the reference of a OCI image URL more robust and add a validator to the reference field for better immediate feedback to the user.
otherui: storage oci pull: reword empty text for tag field to avoid suggesting that this placeholder is the default value, as we currently do not have any here.
9.1 Nov 19, 2025 Release notes ↗
featureLatest 6.17.2-1 Kernel as new stable default
featureCreate LXC containers from OCI images. Open Container Initiative (OCI) images are a popular format for distributing templates for system or application containers. OCI images can now be uploaded manually or downloaded from image registries, and then be used as templates for LXC containers. This…
featureSupport for TPM state in qcow2 format. Some VM guest workloads require attaching a virtual Trusted Platform Module (TPM), for example newer Windows guests. The state of a virtual TPM can now be stored in the qcow2 format. This allows taking snapshots of VMs with a TPM state on file-level storages…
featureFine-grained control of nested virtualization for VM guests. Some VM guest workloads need access to the host CPU's virtualization extensions for nested virtualization. Examples are nested hypervisors or Windows guests with Virtualization-based Security enabled. A new vCPU flag allows to enable…
featureMore detailed status reporting for the Software-Defined Networking (SDN) stack in the GUI. Local bridges and VNets report the currently connected guests. EVPN zones additionally report the learned IPs and MAC addresses. Fabrics are now part of the resource tree and report routes, neighbors, and…
featureKernel 6.17 as new stable default.
featureSeamless upgrade from Proxmox VE 8.4, see Upgrade from 8 to 9.
featureAllow to initiate bulk actions directly from the Tag View. The Tag View provides a convenient overview over virtual guests, grouped according to their assigned tags. Right-clicking on a tag in the resource tree now allows to conveniently initiate bulk actions for virtual guests with that tag.
featureRight-clicking on a VM in the resource tree now allows to reset the VM (issue 4248).
featureImprovements to the new mobile web interface introduced in Proxmox VE 9.0:
featureSupport login using an OpenID Connect (OIDC) realm.
featureThe VM hardware and option panels now show pending changes.
featureAllow to edit VM options directly from the mobile web interface.
featureImprove detection of mobile Firefox (issue 6657).
featureFix an issue where the consent banner was not rendered as Markdown.
featureMove the global search bar to the middle of the screen and adapt to the screen size for improved visibility.
featureUse icons that are more suitable for high-resolution display (issue 6599).
featureIncrease the thresholds for warning about high memory usage for the cluster, node, and guest summary pages.
featureFix an issue where no login dialog would be shown after a session has expired.
featureFix an issue where resource pool members would not be displayed correctly after adding or removing a member (issue 6385).
featureFix performance issues where the GUI would be slowed down in setups with many guests.
featureThe datacenter, node, and guest summary pages now show two separate selectors for graph timeframe and aggregation type. Previously, both settings were combined into one dropdown box.
featureThe journal viewer now keeps the horizontal scrolling position even when refreshing the journal (issue 6679).
featureFix an issue where APT changelogs or package descriptions with non-ASCII characters would be displayed incorrectly.
featureClarify that the graphs in the storage summary show usage in bytes.
featureFix an issue where the first guest would not update its status in the resource tree for five minutes after creation.
featureAllow filtering for name, node or VMID when adding guests to a resource pool.
featureFix an issue where certain setting dialogs, available only to highly-privileged users by default, were susceptible to XSS (PSA-2025-00013-1).
featureFix an issue where the task description of some task types would be incomplete.
featureFix a regression where the resource tree tags would not have the correct color (issue 6815).
featureAdd some missing links to the online documentation (issue 6443).
featureUpdated translations, among others:
featureCzech
featureFrench
featureGeorgian
securityFine-grained control of nested virtualization for VM guests. Some VM guest workloads need access to the host CPU's virtualization extensions for nested virtualization. Examples are nested hypervisors or Windows guests with Virtualization-based Security enabled. The host CPU type makes all CPU…
breakingRemove notice marking AMD SEV-ES and SEV-SNP as highly experimental.
breakingRemove the computed and obsolete group field from the service status data.
breakingRemove obsolete checks and warnings concerning RRD migration.
deprecatedrrdtool is rebuilt to provide a native systemd unit file. The ListenStream directive was updated to not print a deprecation warning by using /run as directory for the socket.
+150 more items in the release notes
9.0.18 Nov 18, 2025
fixui: resource tree: fix rendering of guest text when sorted by name.
fixui: fix recent regression from wrongly rendering guest entries in the tag view.
featureui: console: add a simple heuristic to detect application containers and show a warning for them in the console view, as the console for such containers is (currently) likely not fully functional.
9.0.17 Nov 17, 2025
featureui: lxc: options: make sure values of recently added properties are html-encoded.
fixui: lxc options: fix rendering default value tty count in edit window.
fixfix: ui: trim leading and trailing white space from OCI registry reference for convenience.
otherui: qemu: stop marking SEV-ES and SEV-SNP options as experimental.
otherui: sdn: improve naming of vm network device column in bridge view.
featureui: qemu tdx: add support for configuring TDX attestation.
fixui: resource tree: fix timing race where rendered clustername in root-node could seemingly vanish.
otherui: lxc: support configuring empty environment variables.
fixnetwork-interface-pinning: fix creating directory when '/usr/local/lib' does not exist.
otherui: create wizard: only submit ha-managed if checked for better compatibility with other nodes that are still running a slightly older package version set.
featureui: storage: oci registry pull: add filename field to allow overriding the default one.
featureui: add worker task type description mappings for cluster-wide bulk actions.
9.0.16 Nov 16, 2025
featureapi: add endpoint to query OCI registries for the tags (versions) of an image.
featureui: template view: add OCI registry pull dialog.
featureui: lxc: add support to edit container runtime environment. The new environment management provides a convenient way to change the containers runtime environment. Some container (OCI) images support basic configuration through the environment.
otherui: lxc network: support advanced host-managed option for containers where the network is setup on start directly by the host, avoiding the need for any network management stack inside the CT.
featureui: lxc options: add support for init command entrypoint. Custom container images or OCI images might want to adapt the initial command that gets executed as entry point on container start. For system containers this is /sbin/init, which quite often points to systemd. Most OCI application images…
featureui: provide a context menu for the datacenter node in the main resource tree providing central access to the new cluster-wide bulk-actions for guests.
featureui: provide a context menu for the tag nodes in the main resource tree if the "Tag View" is selected. This allows one to conveniently execute bulk actions for all guests that have a specific tag.
9.0.15 Nov 15, 2025
otherui: ip view: ensure container is fully initialized before store update.
9.0.14 Nov 15, 2025
fixfix creating worker task log file for new cluster-wide bulk migrations.
otherui: container: show dynamically assigned IPs in network tab.
otherui: reuse IP overview from VMs for container and show it in the CT summary view.
featureui: summary view: increase row height to ensure there's enough space by default for new IP overview. This results in the RRD metrics charts to have 250px height for the actual data.
9.0.13 Nov 14, 2025
featureui: qemu options: add support to configure Intel TDX for confidential computing (similar to AMD SEV).
otherui: ha: do not show legacy HA group info in guest status view, as groups got replaced with the more flexible HA Affinity-Rules in Proxmox VE 9.
otherui: qemu: tpm drive: non-raw image formats are now supported for TPM state drives.
featurerrd metrics: always prefer new-format keys over old-format keys to avoid artificially delaying showing the current status of a VM/CT on a fresh cluster.
featureapi: termproxy, vncwebsocket: allow one to using API tokens, the user still needs a local PAM login to use the shell.
other8to9: drop warnings specific to now outdated RRD migration tool.
featureapi: implement node-independent cluster wide guest bulk actions like start, stop, migrate or suspend.
featureui: add guest bulk actions menu at the right side of the datacenter level top bar.
otherapi: metric export: reuse credentials from request for proxying.
featureui: ha resource removal: allow one to purge resource from all rules.
featureVM and CT create wizard: add checkbox for creating HA resource upon VM creation.
featureui: restore: add checkbox for adding HA resource upon restore of a guest backup.
otherui: ha: rules: make status icon unclickable if there are no errors.
otherui: replace Proxmox logo with slightly larger SVG version for better and crisper scaling on HiDPI displays.
otherui: workspace: move global search bar in the middle and make it flexible to better use available space in the top bar.
9.0.12 Nov 14, 2025
fixfix #6815: ui: resource tree: update tag colors properly.
fixfix #6779: daily update: renew already expired certificates, e.g. for when nodes are offline for a longer period of time.
fixfix #6897: ui: add online help reference for LXC container feature edit window.
otherui: properly reset API 401 count to avoid rare edge case where there is no login mask shown after having been logged out (e.g. expired ticket).
featureapi: apt: add 'all' variant to architecture property.
otherapi: apt: correctly encode fields from available updates as utf8.
fixfix #6443: ui: improve online help for VM State storage.
breakingui: ha: remove default focus from VM/CT dropdown in resource edit window to avoid opening the picker immediately when opening the window.
featureha: do not allow an empty VM/CT dropdown in resource edit window.
fixfix #6932: api: acme: add digest and plugin to return schema.
otherui: VM cpu flag selector: query CPU flag list via API.
otherstatus: rrd metrics: always use pve-node-9.0 data format path and drop RRD metrics format migration on upgrade as we now transparently read from the old file if a time-frame falls under the old file(s).
featureapi: nodes: use new status module for sdn subdirectory.
featurepvestatd: add network resource to status reporting.
featureapi: cluster: add support for network resource type.
featureui: resource tree: add network resource.
otherui: network browser:
featureadd ip-vrf panel for evpn zones.
featureadd mac vrf panel.
featureadd zone bridge view.
featureui: sdn: status view: adapt to new network resource.
9.0.11 Oct 6, 2025
featureclose #4248: ui: Add Reset button to right click context menu of virtual machines, like available in the resource tree or the global search result.
breakingui: guest snapshot: remove excess '}' at the end of window title
fixfix #5244 pveceph: install: add new 'manual' repository option, which, for example, can be useful for offline installation
featureui: ceph install wizard: add option and hint for 'manual' repository for, e.g., offline installation through a Proxmox Offline Mirror managed repository.
fixfix typo in ifupdown2 version error message.
otherupdate shipped appliance info index.
9.0.10 Sep 12, 2025
fixui: datacenter notes: fix visibility of top toolbar to allow editing the notes again.
otherapi: node xterm.js and VNC shells: avoid nested login for already logged in root@pam when tunneling to another node. This should avoid a race where the shell hangs on load that seems to very rarely happen in Proxmox VE 9, but currently the fix only covers the root@pam users. While this makes this…
9.0.9 Sep 10, 2025
otherui: cluster dashboard: use higher warning thresholds for memory gauge and the memory widget-column in the node overview table.
featurecluster: resources: add sdn property to cluster resources return JSON schema.
otherui: resource pool: never submit value of filter field when adding guests to a pool.
9.0.7 Sep 2, 2025
otherpve8to9: rework systemd-boot checks
otherconfigs: drop unused country.dat file from install
fixfix #6599: ui: use font-awesome hdd icon instead of png
otherui: icons: use svg versions where possible
otherui: properly center ceph icon
featureapi: ceph: add missing type to api schema
fixfix #6747: ceph: osd: swap vg and lv arguments when creating an OSD
fixfix #6385: ui: pool: members: fix store reload on add/remove
fixha: rule edit: fix enabling ha rules which are disabled
otherapi: use 'number' instead of 'amount' for countable nouns
9.0.6 Aug 20, 2025
fixfix #6652: ceph: osd: enable autoactivation for OSD LVs on creation
featurepve8to9: only allow systemd-boot when it is actually used before upgrade
fixui: ha: rules: fix edit button
9.0.5 Aug 13, 2025
fixfix #6657: pveproxy: detect mobile firefox better
otherui: storage edit: warn about disabling snapshot-as-volume-chain on LVM
otherui: make sure more datacenter option renderers are html encoded
9.0.4 Aug 8, 2025
other8to9 upgrade checks (pve8to9):
otherskip check for running guests if already upgraded
otheruse check for unified cgroup v2 support via pve-container
otherrework systemd-boot checks
featureadd check for removable GRUB entry
othersupport single-line repo entries with bracket options
otherlvm config: check that --clear-needs-check-flag is set if there is a thin_check_options override
otherd/postinst: lvm config: check that --clear-needs-check-flag is set if there is a thin_check_options override
9.0.3 Aug 5, 2025
featured/postinst: add snippet to manage systemd-tmpfiles configurations to ensure they are updated on package upgrade.
9.0 Aug 5, 2025 Release notes ↗
featureLatest 6.14.8-2 Kernel as new stable default
featureNew major release based on the great Debian Trixie.
featureSeamless upgrade from Proxmox VE 8.4, see Upgrade from 8 to 9.
featureVM snapshots on thick-provisioned LVM storages with snapshots as volume chains (technology preview). A new property on thick-provisioned LVM storages enables support for snapshots as volume chains. With this setting, taking a VM snapshot persists the current virtual disk state under the snapshot's…
featureHigh-Availability (HA) rules for node and resource affinity. HA affinity rules are a new mechanism to control the placement of HA resources, such as HA-enabled VMs and containers, on nodes. Node affinity rules mandate that HA resources should only be placed on particular nodes. Resource affinity…
featureFabrics for the Software-Defined Networking (SDN) stack. Fabrics are routed networks of interconnected peers. The SDN stack now supports creating OpenFabric and OSPF fabrics of Proxmox VE nodes. Fabrics can be used for a full-mesh Ceph cluster or act as an underlay network for Virtual Private…
featureModernized mobile web interface. The mobile interface allows a quick overview over guests, tasks, storages, and other resources. It also allows basic maintenance tasks, such as starting and stopping virtual guests. The overhauled mobile interface is written in Rust and based on the Yew framework…
featureZFS now supports adding new devices to existing RAIDZ pools with minimal downtime.
featureImprovements to the notifications:
featureFix an issue with the SMTP endpoint options where the "Authenticate" check box would be inadvertently checked in some browsers (issue 5588).
featureFix an issue where an SMTP endpoint did not properly quote the sender's display name (issue 6188).
featureMove notification settings of backup jobs to a separate tab.
featureClarify the behavior of notification modes by mapping the notification mode "auto" to a concrete mode in the GUI.
featureRemove support for obsolete notification settings that were only briefly available on pvetest repositories.
featureEnsure that updates to translations are immediately reflected in the GUI.
featureFix a short-lived regression that prevented the file-restore dialog from opening.
featureImprove error reporting when a login fails to improve troubleshooting.
featureImprovements to the custom consent window:
featureFix an issue where the consent window size would exceed the viewport size (issue 6312).
featureAvoid showing the consent text twice for OIDC logins (issue 6311).
featureHTML-encode API results before rendering as additional hardening against XSS (PSA-2025-00008-1).
featureSmall improvements to the services view in the node's system panel.
featureFix an issue where the node services view would incorrectly show postfix as disabled (issue 6537).
featureFix an issue where the Help button would not be displayed when editing a backup job (issue 6534).
featureImproved handling of translations:
featureAdd support for plural forms and ngettext usage.
featureTranslations can now contain comments that are extracted from the source code and provide useful context for translators.
featureUpdated translations, among others:
featureCzech (new!)
featureArabic
featureBulgarian
featureFrench
featureGerman
featureItalian
featureJapanese
featureKorean
securityBackport a fix for an out of bounds read vulnerability in libtpms, a library for integrating TPM functionality into QEMU (PSA-2025-00010-1).
securityContainers are now created as unprivileged containers by default. This was already the default when creating containers via the GUI, and it is now also the default when creating containers via API and CLI. Privileged containers lack security features and should only be used in trusted…
breakingContainer setup does not generate a DSA SSH host key anymore, as OpenSSH removed support for DSA.
breakingDrop support for GlusterFS starting with PVE 9, as it is unmaintained.
+89 more items in the release notes
8.4.21 Sep 26, 2026
8.4.20 Sep 26, 2026
8.4.19 Sep 26, 2026
8.4.18 Sep 26, 2026
8.4.17 Sep 26, 2026
8.4.16 Sep 26, 2026
8.4.15 Sep 26, 2026
8.4.14 Sep 26, 2026
8.4.13 Sep 26, 2026
8.4.12 Sep 26, 2026
8.4.11 Sep 26, 2026
8.4.10 Sep 26, 2026
8.4.9 Sep 26, 2026
8.4.8 Sep 26, 2026
8.4.7 Sep 26, 2026
8.4.6 Sep 26, 2026
8.4.5 Sep 26, 2026
8.4.3 Sep 26, 2026
8.4.2 Sep 26, 2026
8.4.1 Apr 10, 2025
fixui: fix regression with checking if volume is QEMU backup, which could block some dialogues like file-restore.
otherceph versions: do not try to parse empty string and include raw string in error to make this easier to debug.
otherui: backup: hide change mode detection for VMs and non-PBS storage.
8.4 Apr 9, 2025 Release notes ↗
featureLatest 6.8.12-9 Kernel as new stable default
featureLive migration with mediated devices such as NVIDIA vGPU. This allows the migration of running VM guests that use mediated devices. Hardware and driver support is required. Currently, only NVIDIA GPUs are known to support live migration.
featureSupport for external backup providers. Proxmox VE now provides an API that allows developers to write backup provider plugins. A backup provider plugin can implement backup and restore functionality for external backup solutions. This way, external backup solutions can be fully integrated with the…
featureSharing host directories with VM guests using virtiofs. Virtiofs allows sharing directories between the Proxmox VE host and VMs without the overhead of a network filesystem. Modern Linux guests support virtiofs out of the box. Windows guests need to install additional software.
featureLatest Linux 6.14 kernel available as opt-in kernel.
featureCeph Squid 19.2.1 is available as stable option.
featureSeamless upgrade from Proxmox VE 7.4, see Upgrade from 7 to 8.
featureAllow to set a consent banner that users must acknowledge before logging in (issue 5463). This can be required for compliance reasons and is already supported in Proxmox Backup Server. The banner supports Markdown and can be set in Datacenter → Options → Consent Text.
featureSort storage content such as ISO files according to the browser locale and with numeric sorting (issue 6138). This results in a more natural sorting order with respect to capitalization and numbers in filenames.
featureDownloading ISO, CT templates, or OVA appliances from URLs now uses the configured proxy for both HTTP and HTTPS connections (issue 3716).
featureThe migration network in the datacenter options can now be entered with a custom CIDR (issue 6142).
featureTask lists now show an additional action column that opens the task details for better discoverability.
featureConfirmation dialogs now mention the guest name to make it clearer for which guest the action will be applied (issue 3181).
featureBetter align privilege checks for adding PCI, USB, or VirtIO RNG devices in the web UI with the actual privilege checks in the backend.
featureAllow uploading and downloading disk images to storages with content type "Import", in preparation for importing disk images to VMs in the future (issue 2424).
featureFix an issue where clicking on an external link to the GUI would display a login screen, even if the current session was still valid.
featureFix an issue where the PCI mapping editor would preselect the wrong radio button.
featureFix a security issue that allowed XSS via certain QEMU guest agent responses (PSA-2024-00016-1).
featureHTML-encode API results before rendering as additional hardening against XSS (PSA-2025-00002-1).
featureVarious smaller improvements to the GUI.
featureUpdate xterm.js to version 5.5.0.
featureFix an issue where an xterm.js console would not have the correct size on high-latency connections (issue 6223).
featureUpdate noVNC to version 1.6.0.
featureFix some occurrences where strings were not marked as translatable.
featureFix some occurrences where translatable strings were split, which made potentially useful context unavailable for translators.
featureImproved translations, among others:
deprecatedClarify the handling of QEMU machine version deprecations. Starting with QEMU 10.1, machine versions will be removed from upstream QEMU after six years. Proxmox VE will support machine versions from approximately two previous major Proxmox VE releases. This is now documented, and QEMU will warn…
securityFix security issues concerning image formats that would allow sufficiently privileged attackers read or read-write access to arbitrary host files. See PSA-2024-00014-1, PSA-2025-00001-1, PSA-2025-00003-1, PSA-2025-00004-1.
breakingRemove an outdated warning about entropy starvation when using /dev/random as an entropy source.
securityOVA/OVF import: Fix a security issue that would allow a sufficiently privileged attacker to obtain a copy of an arbitrary host file by importing a specifically crafted OVA appliance (PSA-2024-00013-1).
breakingRework and improve the Netbox IPAM plugin to properly synchronize the deletion and updates of addresses and networks (issue 5496). Refactor the code to consistently handle errors reported by Netbox. Delete subnets in Netbox after they are removed in Proxmox VE. Properly return the address after…
securitySkip generating rules in forward chains for security groups bound to an interface, instead of causing an error. Rules in the forward chain operate on multiple interfaces, and binding them to an interface does not make sense.
securitySeveral vulnerabilities in GRUB that could be used to bypass SecureBoot were discovered and fixed (PSA-2025-00005-1) The Documentation for SecureBoot now includes instructions to prevent using vulnerable components for booting via a revocation policy.
breakingManually create the IP Ranges in Netbox:
breakingGo to IPAM → IP Ranges and add the DHCP ranges you have configured for your subnet manually
breakingLet Proxmox VE recreate the IP Ranges:
breakingGo to SDN → VNets
breakingEdit the Subnet and delete all DHCP ranges, then click OK
breakingEdit the Subnet, re-create the DHCP ranges, then click OK
breakingApply the SDN configuration
+116 more items in the release notes
8.3.7 Apr 8, 2025
otherui: directory mapping: use actual words in the title
otherui: virtiofs edit: drop writeback checkbox, this feature is unsafe and behaves in unexpected ways.
otherui: set error mask: ensure that message is html-encoded to avoid glitches.
8.3.6 Apr 7, 2025
fixfix #5175: ui: allow configuring and live-migration of mapped PCI (vGPU) resources.
othermapping: pci: include mdev in config checks.
featureui: qemu: add configuration options for AMD SEV-SNP support.
fixfix #5463: show optional consent-banner before user can login. The banner can be configured in the datacenter options.
fixfix #5936: ui: backup: add CT PBS change detection mode selector for manual container backup dialogue.
fixfix #2413: pvestatd: read ballooning RAM usage target from node config.
fixfix #3716: api: use proxy option for https when querying the metadata for a to be downloaded template or ISO file.
otherui: let non-root users configure VirtIO RNG devices if they have the VM.Config.HWType privilege.
breakingui: remove warning about entropy starvation of /dev/random, it does not apply since kernel 5.6 anymore.
featureui: permissions: add ACL path for hardware RNG.
otherbulk migrate: improve precondition checks to also includes unavailable storages on the target node.
otherui: adapt migration window to precondition api additions.
fixui: fix string used for backup storage content-type for PBS backups.
otherui: lxc create: do not suggest nesting is enabled for privileged CTs, correctly clear the checkbox state when disabling it for that case.
otherui: ceph: use common spelling for metadata servers in title
otherapi subscription: output generic apt-auth stanza for ceph.
fixapi subscription: fix permissions for ceph apt-auth file.
featuresystem report: add WWN column to lsblk output.
fixpve7to8: fix broken pipe warning for dkms status invocation.
otherui: ensure various fields are html-encoded to avoid visual glitches.
fixfix #4411: ui: OpenID Connect realm: add fields for new group-mapping support, where a configured user claim is queried for the list of groups that a users should be set or added to.
featureui: tasks: add icon to better convey that one can open the task log from the list of task entries.
othernotifications: rework and clean-up various templates used to send notifications, including those for apt updates, backups, and replication.
featurenode configuration: add per-node option for memory ballooning target and allow one to edit them through the web UI.
featurebackup: implement backup for external providers with full integration reusing and extending our custom storage plugin architecture.
fixfix #6116: ui: qemu: create wizard: order main ISO CDROM drive before additional added CDROM drives in the boot order.
otheruser: password edit: show hint to clarify that password changes for PAM realm only apply to connected node.
otherui: guest migrate window: make all user-visible strings translatable.
otherui: do not split translatable strings.
otherui: qemu pci edit: select correct radiobutton when editing.
featureui: add human readable description for reloadnetworkall task.
otherclose #3181: ui: display guest name alongside VMID in confirm dialogs of potentially destructive actions.
featureui: storage content: allow upload of guest images for import type.
featureapi: add resource map api endpoints for directories.
featureui: add management for directory mappings in the datacenter view.
featureui: qemu: allow one to add Virtiofs devices to passthrough a directory mapping managed folder to the VM.
8.3.5 Mar 6, 2025
otherupdate shipped appliance info index
fixfix #6138: ui: storage content: use locale for sorting
otherui: sdn ipam: powerDNS, NetBox, phpIPAM: split layout in two columns
featureui: sdn ipam: powerDNS, NetBox, phpIPAM: add fingerprint textfield
featureui: storage pbs: reuse new pmxFingerprintField from widget-toolkit
8.3.4 Feb 18, 2025
fixfix #5699: add support to define a HTTP header from which the real IP of a connection should be parsed from. This can be useful for setups with a reverse proxy in front of the API server. On top of that add support for optionally configuring an allow-list of IP networks that the real source IP…
otherapi: network: improve completeness of return schema.
featureui: qemu: add hint that VMs using the VNC clipboard cannot be live migrated.
fixfix #6142: ui: datacenter options: allow custom CIDRs for migration network to cover cases where the network CIDR is not configured on any network interfaces on the node, like for example in a routed full-mesh configuration.
fixpull metric: fix node 'iowait' metric, return the percentage of time spent on waiting on IO in a certain time frame instead of returning the total amount of time that was spent waiting on IO, similar to how the push based metric servers do.
featured/control: add new pve-nvidia-vgpu-helper package as recommended dependency.
8.3.3 Jan 20, 2025
otherupdate shipped appliance info index
featureadd missing htmlEncode for some UI elements
8.3.2 Dec 16, 2024
featureapi: network: add return schema for interface listing
otherui: ceph pool: indentation clean-up
otherui: ceph: don't set default size/min-size when editing existing pool
featureui: ceph pool: add opt-in column for the configured pool application
otherui: qemu: improve error handling and rendering the QGA provided IP addresses of the guest.
otherapi: node status: complete API return schema
8.3.1 Nov 29, 2024
featureui: sdn firewall: add online help reference
featureui: cluster join info: add clipboard icon to "Copy Information" button
otherexternal metric server: influxdb: always quote tags
fixapi: notification targets: fix permission check for POST/PUT
8.3 Nov 21, 2024 Release notes ↗
featureLatest 6.8.12-4 Kernel as new stable default
featureNew Ceph Squid 19.2.0 available as technology preview
featureNew "Tag View" for a quick and customizable overview of virtual guests. Users can already categorize their virtual guests using custom tags. The new "Tag View" view type for the resource tree shows virtual guests grouped according to their tags. This allows for a quick overview of the categories…
featureTighter integration of the Software-Defined Networking (SDN) stack with the firewall. Proxmox VE SDN now generates IP sets for VNets and virtual guests managed by the PVE IP address management plugin. These IP sets can be referenced in firewall rules, making the rules simpler and easier to…
featureMore streamlined guest import from files in Open Virtualization Format (OVF) and Open Virtualization Appliances (OVA). OVF and OVA files can be directly imported from file-based storages in the GUI. This makes it easier to import virtual appliances and simplifies migration from hypervisors…
featureWebhook target for the notification system. The new webhook notification target allows notification events to trigger HTTP requests. Request headers and body can be customized and can contain notification metadata. This allows users to push notifications to any target that supports webhooks.
featureNew change detection modes for speeding up container backups to Proxmox Backup Server. Metadata and data of backup snapshots are now stored in two separate archives. Optionally, files that have not changed since the previous backup snapshot can be identified using the previous backup snapshot's…
featureCeph Squid 19.2.0 is available as a technology preview.
featureSeamless upgrade from Proxmox VE 7.4, see Upgrade from 7 to 8
featureIntroduce a tag view for the resource tree. Users can already assign tags to virtual guests to categorize them according to custom criteria. The new tag view shows virtual guests grouped according to their assigned tags. This allows users to get a quick and structured overview over the virtual…
featureConfirmation dialogs for guest actions now also display the guest name (issue 5787).
featureAllow unprivileged users to create and manage their API tokens via the GUI (issue 5722). The backend already allowed this, but the functionality was not available in the GUI.
featureUnplugging disks from a running VM is now done asynchronously to avoid running into the HTTP timeout of 30 seconds.
featureIncrease the minimum length requirement for new passwords to 8 characters.
featureNodes in maintenance mode are now displayed with a wrench icon in the resource tree.
featureShow only installed services in the node's system panel by default, but optionally allow to show all services (issue 5611).
featureRight-align numbers in the S.M.A.R.T. values table (issue 5831).
featureUpdate the noVNC guest viewer to upstream version 1.5.0.
featureFix an issue where using the noVNC console would cause the browser to attempt storing a VNC password (issue 5639).
featureFix an issue where notes for nodes and virtual guests did not preserve percent encodings (issue 5486).
featureFix an issue where clicking on an external link to the GUI would display a login screen, even if the current session was still valid.
featureFix an issue with reset behavior when editing a Proxmox Backup Server storage.
featureFix inconsistent reporting of host CPU usage in node selectors.
featureFix an issue where editing the PCI mappings for any but the first node would fail.
featureFix an issue where the Datacenter summary would miscalculate the storage size if a cluster node is offline.
featureFix an issue where the backup job details would misreport the backup mode as snapshot mode instead of suspend mode.
featureFix an issue where the permission check for adding the TPM state was overly strict.
featureFix a regression which broke the mobile UI (issue 5734).
featureFix incorrect online help links (issue 5632).
featureDisable the button for regenerating the cloud-init image if the user lacks the necessary privileges. This better aligns the GUI with the privilege check in the backend.
featureImproved translations, among others:
featureBulgarian (NEW!)
featureFrench
featureGerman
featureRussian
securityThe selector for security groups now shows a tooltip for comments that are too long to fit within the column width (issue 5879).
securityFix a security issue where an authenticated user with necessary privileges can trick the system into accessing arbitrary host block devices, including passing them through into guests as a volume.
securityFix a security issue where authenticated attackers with Sys.Audit or VM.Monitor privileges could download arbitrary host files via the API. See PSA-2024-00009-1 for details.
breakingImprovements to Secure Boot management. With the need to update the revocation database embedded in the shim boot loader, some edge-cases were discovered and improved in the proxmox-secure-boot metapackage. Ship an apt pinning snippet to ensure that Proxmox provided packages are installed, even if…
securityFix a RCE vulnerability in the shim bootloader used for Secure Boot support. See PSA-2024-00007-1 for details.
+173 more items in the release notes
8.2.10 Nov 19, 2024
featureui: firewall: add sdn as valid scope to IP-set selector
featureui: firewall: add forward direction to rule panel
featureui: sdn: add firewall panel
otherui: firewall: show warning when creating forward rules
otherui: import: clarify working storage emptyText
otherchange recommendation of pve-network packages to hard dependency, it's now pulled in by pve-firewall anyway
otherapi: notifications: require powerful privileges for target management
8.2.9 Nov 18, 2024
otherapi/ui: improve mdev listing for PCI mappings. Extend the parameter for the PCI ID to accept both, PCI IDs or named mappings, and for the latter mappings, iterate over all local PCI devices in it and extract the mdev types.
featureui: implement 'Tag View' for the resource tree, which groups guests by their tags. Guests with multiple tags are visible under each of them. Guests without tags and nodes and storages are added to the end of the tree.
otherui: cloudinit: use cloudinit update api when regenerating images.
otherui: cloudinit: avoid suggesting to unprivileged users that they can re-generate the image, disable the button in this case.
fixfix #5787: ui: display guest name in confirmation dialog for actions like start, stop, shut down, or converting to a template.
featureui: lxc: add readonly option for device passthrough.
featureui: lxc: add the "discard" mount option.
otherui: expose the newly supported BZIP2 as available compressor for backups.
fixfix #5722: ui: api token: allow unprivileged users to create their own api tokens, they are self-service after all.
featureapi: add routes for webhook notification endpoints.
otherui: workspace/user view: change password minimum length to 8 to follow recent NIST recommendations.
otherui: pool: dynamic status update every 10s in members screen
fixui: pbs storage: fix reset behavior when editing existing entry
otherapi/ui: include the node ha status in resources call and show as icon
otherui: acme: switch cluster view items over to those from widget-toolkit
otherui: tree: show tooltips for all entries that have sensible information
fixfix #3893: api/ui: node network: expose bridge VLAN IDs option to allow one to configure VLAN ranges, This can be useful for devices that support hardware offloading them, but only support a limited amount.
breakingui: remove experimental from change detection modes description
featureui: add import content type for file-based storages to allow handling imports of OVA/OVF backed archives more conveniently.
featureui: guest import: add storage selector for overriding the OVA staging storage for the temporary extraction.
otherui: import: show size for dir-based storages
otherui: enable upload/download/remove buttons for 'import' type storages
featureui: qemu: add AMD SEV configuration to Options
securityfix #5879: ui: add tooltip to security group comments
fixfix #5810: ui: show confirmation/warning dialog for sdn apply
featureapi: package repositories: add Ceph Squid to available repos
8.2.8 Oct 24, 2024
fixfix #5734: provide missing methods for Proxmox.Utils for mobile UI
otherapi: subscription update: report error if removing ceph-auth file fails
featureadd module to centrally track Ceph release info for the backend
otherpveceph: prompt user on TTY about installing experimental version
featureceph releases: add 19.2 Squid as available release, currently still as technology preview
fixfix #5753: api: add 'pstart' member to task status return schema
fixfix #5302: ui: vm cpu affinity displayed in hardware overview
fixfix typos in user visible strings
fixfix #5632: ui:storage: correct online help link of backup view
otherui: ceph wizard: show hint for releases that are in tech-preview state
otherui: ceph wizard: filter out enterprise repo for tech-preview releases
featureui: ceph wizard: add Ceph 19.2 Squid as installable release
otherapi: improve the API JSON schema of various API calls
8.2.7 Sep 23, 2024
featureapi: add missing schema annotations for download endpoints and adapt existing ones to renaming the respective property to 'download_allowed'.
otherpvesh: limit download handling to annotated endpoints to unify the behaviour with pve-http-server.
8.2.6 Sep 20, 2024
fixfix #5731: vzdump jobs: fix execution of converted jobs
8.2.5 Sep 12, 2024
otherui: qemu hardware: use background delay for asynchronous remove tasks so that the task log window doesn't get shown if the task already finished.
otherui: qemu hardware: use asynchronous remove API call for disk hot-unplug to expand the task duration timeout from 30 seconds to 10 minutes, helping overloaded and/or slow systems.
featurevzdump config: add fleecing property string to make it clear that fleecing can be configured as a node-wide default too.
fixui: fix align mode of the two-column container widget, which is used for the advanced tab of the backup job edit window.
fixvzdump: fix unit for bandwidth limit in log message, it's in KiB (base 2) not KB (base 10)
featurepve7to8: allow one to run arbitrary newer Proxmox kernels after upgrade
featureapi: replication: add 'job-id' to notification metadata to allow users to create notification match rules for specific replication jobs.
othervzdump: apt: notification: do not include domain in 'hostname' field.
otherapi: replication: include 'hostname' field for notifications.
fixpve7to8: fix typo in log message.
otherui: backup job: clarify experimental change detection modes.
fixui: fix maxcpu validity check in the host CPU renderer to add a missing space, making it consistent with the CPU usage column.
fixui: utils: fix inconsistency in host cpu usage display in search view, adding a missing space between the number of CPUs and the actual label.
fixui: sdn ipam: fix editing custom mappings
featureapi: ceph mds: ensure the ID for a new MDS does not start with a number, as Ceph doesn't supports that.
fixfix #5570 ui: ceph: make the MDS ID fully configurable to avoid a issue when the hostname, which is was used as base for the ID, starts with a number. This also made the "extra ID" field redundant.
fixfix #5010: ceph: pool set only properties that actually changed to avoid false-positive errors.
otherapi: backup jobs: pass the job ID parameter to make it accessible for the notification system.
featureui: backup jobs: allow one to set custom job ID in advanced settings
fixui: resource mappings: fix editing of mapping for non first node
otherui: sdn vnets: hide irrelevant fields depending on zone type
fixui: dc summary: fix calculation of storage size when one or more nodes are offline
featureapi: metrics: add /cluster/metrics/export endpoint
fixui: qemu: hardware: fix permission check for enabling the button to add a TPM-state volume
otherupdate shipped appliance info index
8.2.4 Jun 10, 2024
otherpvestatd: clear trailing newlines
featurewww: advanced backup: add pbs change detection mode selector
featurevzdump: add pbs-change-detection-mode to config template
8.2.3 Jun 4, 2024
otherupdate shipped appliance info index
featureapi: add proxmox-firewall to versions pkg list
othergitignore: ignore any test artifacts
othertests: remove vzdump_notification test
othernotifications: use named templates instead of in-code templates
8.2.2 Apr 23, 2024
fixui: fix form-reset behavior of backup job editor
fixui: backup jobs: fix fleecing parameters for 'run now' button
fixui: mobile: fix login for users that have a TOTP based second factor set up
otherui: mobile: show is setup is lacking the best recommendations for enterprise production set ups
othervzdump: also warn when hook script fails for backup-abort or log-end phase
featureui: user edit: protect user's TFA settings for new factor variants
fixfix #5251: ui: login: set autocomplete on password and user
otherui: esxi importer: try to better convey what live-import does
8.2 Apr 24, 2024 Release notes ↗
featureLatest 6.8 Kernel as new stable default
featureNew import wizard to migrate guests directly from other hypervisors. Connect to other hypervisors using their public APIs and directly migrate guests to Proxmox VE. First implementation is for VMware ESXi. Guests can be started on Proxmox VE while their data is still being imported to the target…
featureSupport for automated and unattended installation of Proxmox VE. Proxmox VE now ships a tool that prepares a Proxmox VE ISO for automated installation. The prepared ISO retrieves all required settings for automated installation from an answer file. The answer file can be provided directly in the…
featureBackup fleecing (advanced feature). When creating a backup of a running VM, a slow backup target can negatively impact guest IO during the backup process. Fleecing can reduce this impact by using fast local storage as a buffer for data blocks. However, the fleecing approach requires the use of…
featureModernized Proxmox VE firewall implementation based on nftables (opt-in technology preview). The new implementation is written in Rust and intended to replace the current firewall based on iptables in the future. Moving to nftables will improve robustness and make it possible to fix long-standing…
featureSeamless upgrade from Proxmox VE 7.4, see Upgrade from 7 to 8
featureFix an issue where the VM creation wizard would not allow creating a VM without an ISO.
featureFix an issue that prevented users from seeing accessible replication jobs.
featureFix an issue where the node summary page would not display the version of a running foreign kernel (issue 5121).
featureWhen editing LVM or directory storages, add an explanatory tooltip to the "Shared" checkbox.
featureExpose the saferemove setting for LVM storages in the GUI.
featureAdd some missing packages to the "Package versions" window.
featureWhen editing ZFS storages, display 16k as the blocksize placeholder to reflect the current ZFS defaults.
featureChange "Syslog" button to "System Log" button to better reflect that the log is gathered from the systemd journal.
featureFix an issue where the GUI used an incorrect language code for Korean, and provide a clean transition for users who still have a cookie with the incorrect language code set.
featureImprove documentation of the /nodes/{node}/status API call.
featureFix an issue where the date picker would choose the wrong date after changing to a different month.
featureWhen granting permissions to a group, make the group selector searchable, similar to the user and token selectors.
featureClarify the confirmation prompt for removing a certificate without a name.
featureFix an issue where edit windows would not be correctly masked while loading.
featureFix an issue where adding a storage to a pool would break edit windows of the same browser session, and guard against similar issues in the future.
featureDisplay the end-of-life message as a notice up until three weeks before the end-of-life date, and display it as a warning from that point on.
featureMove the "Reset" button for edit windows to an icon-only button in the title bar (issue 5277). This reduces the risk of misclicking and accidentally resetting form data.
featureFix xterm.js not loading in certain OS+Browser constellations, for example iOS (issue 5063).
featureChange the icon for editing guest notes from a gear to a more fitting pencil.
featureAllow to select note contents by double-clicking. Previously, this was not possible because double-clicking on a note would always open the editor window. This behavior can now be optionally disabled by a browser-local GUI setting.
featureThe TFA input field now sets an autocompletion hint for improved compatibility with password managers (issue 5251).
featureFix an issue where the mobile UI did not allow to log in with TOTP.
featureDisplay the subscription reminder in the mobile UI as well, for improved consistency with the GUI.
featureThe user edit window now disables the "Key IDs" field if the user has TFA configured.
featureThe HTTP server now supports compressing responses using deflate in addition to gzip.
featureImproved translations, among others:
featureFrench
featureGerman
deprecatedAvoid passing the deprecated noacl mount option for ext4 formatted volumes (issue 4846).
deprecatedDeprecate notification options that were only relevant in a short transition period before the final notification system was introduced.
breakingIntegrate patches that make it possible to manually install and use the upstream Ceph dashboard. Due to upstream changes, Proxmox VE 8.0 and 8.1 were incompatible with the Ceph dashboard.
deprecatedRestrict the values of legacy user-keys to the ones that were allowed in the deprecated initial TFA system.
breakingRemove deprecated and now forbidden priority field from change request to PowerDNS (issue 5275).
breakingModels using i40e. Their names can get an additional port suffix like p0 added.
+151 more items in the release notes
8.1.11 Apr 19, 2024
fixfix #4136: backup: implement fleecing option for improved guest stability when the backup target is slow
featureapi: notifications: add missing 'smtp' to index
otheruse SSH command helper for pvesh and to get VNC connection info to benefit from improvements like known host key pinning
othersystem report: list held-back and pinned APT packages and priorities of APT sources
othersystem report: avoid printing the contents of certain wrongly named configuration files
othersystem report: output cluster-wide job configuration
othersystem report: output kernel command line from current boot
featureui: acl: allow searching by typing in the group selector
otherapi: apt versions: track optional amd64-/intel-microcode and pve-esxi-import-tools packages
featureui: acme: add External Account Binding (EAB) related fields
fixfix #5093: ui: acme: expose custom directory option
breakingd/postinst: make deb-systemd-invoke non-fatal to avoid potentially breaking an update for unrelated reasons
fixfix #4513: ui: backup job: add tab for advanced options
othervzdump: improve handling performance settings, by using a per-property fallback and honoring the schema defaults
featureui: lxc: add edit window for device passthrough
featureui: lxc: add firewall log view filtering
fixfix #4963: ui: firewall: fix edge case where editing firewall rules using ips / cidrs would be broken
fixfix #1905: ui: VM: allow moving unused disks
fixfix #4759: ceph: configure ceph-crash.service and its key
featuresdn: evpn: allow empty primary exit node in zone form which was broken by a change in libpve-network-perl
8.1.10 Mar 28, 2024
featureguest import: allow setting VLAN-tag for network devices in advanced tab
8.1.8 Mar 27, 2024
otherui: parser: recognize Intel E1000E as network card
featureui: network card selector: add Intel E1000E as choosable model
featureui: guest import: allow setting mac addresses to newly generated unique ones
otherui: guest import: use box-label style for prepare-for-virtio checkbox
otherui: guest import: fine tune icons
otherui: guest import: validate that selected VMID does not exist yet
8.1.5 Mar 14, 2024
otherreport: format iptables output for readability
fixfix #5067: vzdump: include total backup size in notification
otherui: storage: zfs: set blocksize placeholder (empty text) to 16k
featureui: add compat for fix of previously wrongly used Korean language code
otherui: lvm: expose saferemove setting
featurepvesubscription: add missing return statement to avoid a failing null check and its error message.
fixceph: fix edge case of wrong files being deleted on purge
otherui: node: system: avoid using specific and outdated 'Syslog', just call it 'System Log'
fixfix #5106: ui: ceph status: make column wrap the summary text on expand
otherui: qemu: bump max cores to 256 by socket
otherapi: node status: document boot-info and current-kernel in return schema
featureapi: nodes: allow usage of query url metadata with Sys.AccessNetwork
otherui: storage: enable download-url button with Sys.AccessNetwork capability
otherui: IP-set: re-work column widths
8.1.4 Dec 14, 2023
otherapi: apt versions: track dnsmasq and frr-pythontools as optional packages
featureapi: node status: add guard for missing secure-boot efi var
otherui: iso selector: disable all fields to avoid bogus validation where one cannot confirm the dialog even though the values visible are correct
featureapi: replication: allow users to enumerate accessible replication jobs
fixfix #5121: ui: node status: avoid invalid array access for certain foreign kernels
8.1.3 Nov 23, 2023
fixui: pool view: fix editing nested pools
8.1 Nov 23, 2023 Release notes ↗
featureLatest 6.5 Kernel as new stable default
featureSecure Boot support. Proxmox VE now includes a signed shim bootloader trusted by most hardware's UEFI implementations. All necessary components of the boot chain are available in variants signed by Proxmox. The Proxmox VE installer can now be run in environments where Secure Boot is required and…
featureThe core of Proxmox VE's Software-Defined Network stack moved from experimental to supported and includes new features. Proxmox VE SDN allows fine-grained control of virtual guest networks at the datacenter level. The new automatic DHCP IP address management (IPAM) plugin can be used to…
featureNew flexible notification system. Send notifications not only via the local Postfix MTA, but also via authenticated SMTP or to Gotify instances. Flexible notification routing with matcher-based rules to decide which targets receive notifications about which events.
featureProxmox Server Solution GmbH, the company behind Proxmox VE development and infrastructure, was assigned an official Organizationally Unique Identifier (OUI) BC:24:11 from the IEEE to use as default MAC prefix for virtual guests. This OUI can be used for virtual guests inside private networks by…
featureCeph Reef is now supported and the default for new installations. Reworked defaults brings improved performance and increased reading speed out of the box, with less tuning required.
featureSeamless upgrade from Proxmox VE 7.4, see Upgrade from 7 to 8.
featureImprovements to bulk actions:
featureAdd a new "Bulk Suspend" action to suspend a selection of guests in one action.
featureAdd a new section above the guest list for configuring guest filters and add a button for clearing filters.
featureAllow to filter guests by their tags.
featureReorder fields and drop obvious warning about local storage to improve on screen-space utilization.
featureReword the message displayed for bulk actions in the task log to "Bulk Start/Stop/Migrate". The message shown previously was "Start/Stop/Migrate all" and could be misleading in case not all guests were affected (issue 2336).
featureThe "Bulk Migrate" action is now hidden on standalone nodes, as there is no valid migration target in that case.
featureImprovements to the node summary panel:
featureThe summary now indicates whether the node was booted in legacy (BIOS) mode, EFI mode, or EFI mode with Secure Boot enabled.
featureThe currently running kernel is now reported more compactly by indicating only the version and the build date.
featureAllow to automatically decompress an ISO file when downloading from a URL to a storage. The decompression algorithm can be set in the GUI (issue 4849).
featureAllow moving VMs and containers from one pool to a different pool in one operation.
featureAvoid needlessly reloading the GUI after ordering a certificate via ACME for a different cluster node.
featureThe permission editor now also shows the ACL paths for notifications and PCI/USB mappings.
featureThe resource tree now displays the usage in percent when hovering over a storage.
featureIf the configured tree shape for tags is not "Full", the resource tree now displays a tooltip with the tag name when hovering over the configured shape.
featureEnsure the SPICE config is downloaded with the correct file extension on Safari to avoid problems with macOS application association (issue 4947)
featureFix an issue where the "Migrate" button stayed disabled even if selecting a valid target node.
featureFix a bug where the backup job editor window would add an invalid entry for VMID 0 when using selection mode "all".
featureImprove error message when creating a VM with an invalid hostname: Clarify that a valid hostname, not a valid DNS name, is expected (issue 4874).
breakingRemove the 10-minute timeout for allocating VM disks when restoring from backup, as this timeout may be exceeded if disks are large or network storage is involved (issue 2817).
deprecatedLog a warning when starting a VM with a deprecated machine version.
deprecatedMark global pg_bits setting as deprecated and make it a no-op. The setting has been deprecated since Ceph 13.
breakingUsing the Console/Shell on a PVE node is now possible for all users with the appropriate permissions (Sys.Console). The restriction to the pam was removed. The users will still need to login as a system user on the shell though.
breakingWith Kernel 6.5 and ZFS it can happen that the host hits a kernel bug when starting a VM with hugepages, and the host must be rebooted. More information can be found in the forum and in the bug reports for ZFS and Linux kernel.
breakingSome users with Intel Wi-Fi cards, like the AX201 model, reported that initialization of the card failed with Linux kernel 6.5. This is still being investigated. You should avoid booting into the new kernel if you have no physical access to your server and an Intel Wi-Fi device is used as its only…
breakingSome SAS2008 controllers need a workaround to get detected since kernel 6.2, see the forum thread for details.
breakingFor certain Linux VMs with OVMF and guest kernels >= 6.5, there might be issues with SCSI disk hot(un)plug. This is a more general issue and is currently being investigated and will be fixed on Linux upstream.
breakingThe TPM (Trusted Platform Module) hardware random number generator (RNG) is now disabled on all AMD systems equipped with a firmware-based TPM (fTPM) device. This change was implemented due to such RNGs causing stutters in many systems. Affected systems should switch the RNG source from /dev/hwrng…
breakingSome Dell models, which appear to include all those using a BCM5720 network card, have a compatibility issue with the tg3 driver in the kernel based on version 6.5.11. From our current understanding 14th Generation Dell Servers (T140, R240, R640,...) are affected, while others (e.g., R630, R620,…
breakingSystems installed on top of Debian or those installed before Proxmox VE 7.0 will be switched by default from the ifupdown network configuration implementation to the modern ifupdown2. This switch occurs because the stabilized SDN package is now marked as a recommendation for various Proxmox VE…
breakingThe pve-edk2-firmware package, which provides (U)EFI firmware for virtual machines, has been split up in multiple packages. Users of the fully supported amd64/x86_64 architectures do not need to change anything. The OVMF variants, used for amd64/x86_64 based virtual machines, got moved into…
breakingWith the 8.1 machine version, QEMU switched to using SMBIOS 3.0 by default, utilizing a 64-bit entry point. Since the SMBIOS 32-bit and 64-bit entry points can coexist, and most modern operating systems set up both, the general impact should be minimal However, certain operating systems or…
+142 more items in the release notes
8.0.9 Nov 18, 2023
othermove default link config to drop-in snippet to avoid that the all default fallback settings are overridden, not just the MACAddressPolicy one we actually want to change.
8.0.8 Nov 17, 2023
otherupdate shipped appliance info index
featurereport: add files from interfaces.d and SDN config directories
featurenode console: allow usage for non-pam realms, users still need to login with credential recognized by PAM
featureui: wizards: allow adding tags in the qemu/lxc create wizard
otherui: guest wizard: increase height slightly to match 4:3 ratio
otherpve7to8: check for proper grub meta-package for bootmode
fixfix #4631: ceph: osd: create: add osds-per-device
fixfix #2336: ui: adjust message for bulk start/stop/migrate to better reflect that not always all guests are selected
featureui: bulk actions: rework filters and allow one to filter by tags
featureui: add tooltips to non-fully-expaned tags globally
deprecatedceph: mark global pg bits setting as deprecated
otherui: hide bulk migrate options on standalone nodes
fixfix #4497: acme: add support for external account bindings
deprecatedapi/acme: deprecate 'tos' endpoint in favor of new, more general, 'meta' one
featureapi: add bulk-action endpoint for mass-suspendig (hibernating) virtual machines
featureui: add bulk-action suspend to node menu
fixfix #4442: add date-time range filtering for firewall logs
featureui: ceph status: add pg warning state
otherui: ceph status: rename 'working' state into 'busy'
otherapt: use apt changelog for changelog fetching
otherui: ipset: make ip/cidr required
othership default link config to disable systemd link mac-policy, avoiding that systemd marks the network as being without carrier, which can result into issues for some network configurations like source-NAT if no TAP device is (yet) connected to the bridge.
breakingapi: osd destroy: remove the mclock max iops settings to avoid that it's reused when a new OSD gets the same OSD ID again
fixpvesh: proxy handler: fix handling array parameters
breakingapi: notification: remove notification groups and filters, they are replaced by a matcher based routing system.
featureapi: various adaptions to new matcher based notification system
featurenotify: add API routes for smtp endpoints
featureapi: notification: add 'disable' and 'origin' params
otherapi: notification: simplify ACLs for notification
8.0.7 Oct 29, 2023
fixfix #3069: vzdump: add property 'performance: pbs-entries-max=N'
fixfix #4849: ui: allow decompressing ISO files when downloading
otherpve7to8: update checks from stable-7 branch
otherui: vm selector: gracefully handle empty IDs in setValue function
otherui: subscription upload: trim key from whitespace on submission
otherapi: subscription update: actually ignore surrounding whitespace
otherhw-address: check if source file changed so cache needs update
otherui: ceph: improve discoverability of warning details
featureui: ceph wizard: switch to reef as default release for new setups
otherpvesh: decode streamed responses
featureui: container guest status: show privileged status as new row
otherui: container guest status: show distro logo and name in summary header
fixui: tags: fix focus for edit mode
featuresdn: controllers: add isis controller
breakingsubscription: remove ceph APT auth if invalid
featureui: datacenter config: adapt to new default MAC prefix
featureui: disable new notification UI for now, will be reworked
8.0.6 Sep 8, 2023
fixfix #4663: Prevent Web UI reload on cert order for other node
otherwebsite: update external links to www.proxmox.com
fixvzdump: fix notifications for backing up VMs with 2+ disks to PBS
otherapi: ceph: improve reporting of ceph OSD memory usage, using PSS metric now which avoids ignores page-cache that can be freed easily and also measures shared memory in proportional relations.
otherpveceph: support installing Ceph 18.2 Reef
featureui: ceph wizard: add Ceph 18.2 Reef to available releases
otherui: ldap: ad: support 'mode' parameter, replacing 'secure'
otherui: ldap: ad: replace occurrences of SSL with TLS
fixfix #4947 spice: correct filename-extension handling for Safari
fixfix #4808: ceph: mds create: use snake_case when setting options
featureui: pool view: replace allow-transfer checkbox with simple hint
featureapi: pool update: rename 'transfer' parameter to 'allow-move'
8.0.5 Aug 16, 2023
featureadd 'check connection' checkbox for ldap as advanced option
fixfix #474: allow transferring VMs between pools
featureadd api endpoints and UI for notification subsystem
8.0.4 Aug 1, 2023
fixui: migrate: fix disabled migrate button glitch
otherupdate shipped appliance info index
otherpve7to8: sync over from stable-7 branch
fixpve7to8: fix Ceph noout check
fixfix #4551: ui: use gettext on hardcoded byte units
fixfix #4364: pveceph: add confirmation dialogue for ceph installation
fixfix #4758: ui: lxc wizard: allow multiple ssh keys
fixui: sdn: zonedit: fix non-advanced display
otherui: active directory realm: expose case-sensitive option
featureui: add some missing htmlEncodes
otherhandle pve-kernel -> proxmox-kernel rename
8.0.3 Jun 21, 2023
otherui: use common gettext for IOMMU-Group
otherpve7to8: content-dirs check: skip paths that cannot be resolved
otherpve7to8: avoid confusing warning about required setting 'storage' for vzdump
featurepve7to8: add check for systemd-boot presence, where needed.
8.0 Jun 22, 2023 Release notes ↗
breakingWorkaround breaking driver changes in newer Nvidia grid drivers, which prevented mediated devices (mdev) to be reclaimed upon guest exit.
deprecatedReplace usages of deprecated -no-hpet QEMU option with the hpet=off machine flag.
deprecatedThe rsync invocation used when joining nodes via ssh, which is deprecated, has been adapted to changes in rsync CLI argument parsing in Bookworm.
breakingAdd support for new Ceph enterprise repositories. When installing Ceph via pveceph install or the web UI, you can now choose between the test, no-subscription and enterprise (default) repositories. The -test-repository option of the pveceph install command was removed.
breakingDrop support for Ceph Octopus and Pacific, as they are not supported in Proxmox VE 8.
breakingRemove overly restrictive validation of public_network during monitor creation. Configuring a public network like 0::/0 or 0::/1 caused a superfluous "value does not look like a valid CIDR network" error.
deprecatedThe access/ticket API endpoint does not support the deprecated login API (using new-format=0) anymore.
breakingRemove the Permission.Modify privilege from the PVESysAdmin and PVEAdmin roles and restrict it to the Administrator role. This reduces the chances of accidentally granting privilege modification privileges.
breakingFix an issue where an allowed special ICMP-type could accidentally be added as destination port for a layer 4 protocol, breaking firewall rule loading.
breakingOutdated pve6to7 compatibility check script was removed.
breakingFirefox 79 (released on 2020-07-28)
breakingChrome/Chromium 85 (released 2020-08-25)
breakingSafari 14 (released 2020-09-16)
breakingStorage activation now checks that every content type uses a different directory, in order to prevent unexpected interactions between different content types. This breaks setups in which the content-dirs option was set up to map different content types to the same directory, and setups in which…
breakingThe mkdir option is considered deprecated, it got split into create-base-path and create-subdirs as fine-grained replacement. While Proxmox VE will continue to support this option during the 8.x release series, we recommend switching over to the new options already now.
breakingPrevious 6.2 kernels had problems with incoming live migrations when all of the following were true:
breakingVM has a restricted CPU type (e.g., qemu64) – using CPU type host or Skylake-Server is ok!
breakingthe source host uses an Intel CPU from Skylake Server, Tiger Lake Desktop, or equivalent newer generation.
breakingthe source host is booted with a kernel version 5.15 (or older) (e.g. when upgrading from Proxmox VE 7.4)
breakingKernels based on 6.2 have a degraded Kernel Samepage Merging (KSM) performance on multi-socket NUMA systems. Until we either find a targeted fix for our kernel, or change the default kernel to a 6.5 based kernel (planned for 2023'Q4), the current recommendation is to keep your multi-socket NUMA…
breakingDepending on the workload this can result in a significant amount of memory that is not deduplicated anymore.
breakingThis issue went unnoticed for a few kernel releases, making a clean backport of the fixes made for 6.5 hard to do without some general fall-out.
breakingQEMU 8.0 removed some previously deprecated features. Proxmox VE 8 won't use the -chardev tty and -chardev parport aliases anymore, and no other features were used by the Proxmox VE stack. Thus, only installations using args inside their guest configs need to check the compatibility. See the Qemu…
breakingThe removed features in QEMU 8.0 also include the Proxmox VE-specific, but unused/deprecated QMP commands get_link_status, snapshot-drive and delete-drive-snapshot.
breakingOnly root@pam is now allowed to clone and restore guests with passed through PCI/USB devices that are not using the new mapping feature. To allow regular users to clone and restore with PCI/USB devices, create a mapping and give the user 'Mapping.Use' on that.
breakingTrying to pass through the same PCI device multiple times in a single guest now fails earlier. A qm showcmd for example does not generate an output anymore in that case.
breakingWhen passed through device is configured as multifunction (or 'All Functions' in the web UI) with a set mediated device (mdev) this now generates an error instead of a warning. Use the specific function instead.
breakingcloud-init: If the VM name is not a FQDN and no DNS search domain is configured, the automatically-generated cloud-init user data now contains an additional fqdn option. This fixes an issue where the hostname was not set properly for some in-guest distributions. However, the changed user data will…
breakingMigration doesn't scan all local storages for orphaned volumes anymore. Instead, only the volumes referenced in the configuration (including snapshots) are picked up. This avoids unexpected errors where an unavailable local storage could fail migration even if no volume referenced that storage.
breakingThe lxc.id_map configuration key has been deprecated for a long time by lxc and was replaced by lxc.idmap. With this release, its presence is considered an error. The key can only be present if it was manually added to a guest configuration.
breakingThe lxcfs is now built with fuse 3. This upgrade is done on a major release, since all running containers need to be restarted afterwards.
breakingThere is a new SDN.Use privilege (and corresponding PVESDNUser role) that is required to configure virtual NICs in guests. See "Access control" section above for details!
breakingThe Permission.Modify privilege has been removed from the PVESysAdmin and PVEAdmin roles, in order to reduce the chances of accidentally granting the privilege to modify privileges. If a particular setup requires a role with this privilege, it is necessary to define a new custom role and use that…
breakingUsers with VM.Allocate/Datastore.Allocate/Pool.Allocate privileges, but without the Permissions.Modify privilege, can now only assign a subset of their own privileges to specific VM/storage/pool paths. Previously they could assign any role to specific VM/storage/pool paths. As the privileges…
breakingEditing backup jobs now generally requires the Datastore.Allocate privilege on the target storage, and editing backup jobs with dumpdir requires root privileges.
breakingUser accounts will now be locked after too many attempts to authenticate with a second factor. This is intended to protect against an attacker who has obtained the user password and attempts to guess the second factor. Unlocking requires either a successful login with a recovery key or a manual…
breakingSystems booting via UEFI from a ZFS on root setup should install the systemd-boot-efi package after the upgrade. The systemd-boot was split out from the systemd package for Debian Bookworm based releases. It won't get installed automatically upon upgrade from Proxmox VE 7.4 as it can cause trouble…
breakingThe API can handle array-type data differently, while trying staying backward compatible. Instead of being able to pass the individual elements separated by null bytes, you can pass the data directly as array.
breakingBefore Proxmox VE 8, the API endpoint to trigger a QEMU guest agent (QGA) command execution (/nodes/{node}/qemu/{vmid}/agent/exec) allowed passing a command as a single string, which would then be automatically split at whitespace. This was deemed too brittle and is not supported anymore. You must…
breakingThe Open vSwitch (OVS) version shipped with Proxmox VE 8 / Debian Bookworm contains a bug that causes it to fail to provide a working network when run on a system with 2 CPU cores or less. This is caused by the handler responsible for filling the forward database (FDB) not being started, so…
+114 more items in the release notes
7.4 Mar 23, 2023 Release notes ↗
featureProxmox VE now provides a dark theme for the web interface.
featureGuests in resource tree can now be sorted by their name, not only VMID.
featureThe HA Cluster Resource Scheduler (CRS) stack was expanded to rebalance VMs & CTs automatically on start, not only recovery.
featureAdded CRM command to the HA manager to switch an online node manually into maintenance mode (without reboot.
featureAdd a fully-integrated "Proxmox Dark" color theme variant of the long-time Crisp light theme.
featureAdd "Proxmox Dark" color theme to the Proxmox VE reference documentation.
featureLocal storage types that are located on other cluster nodes can be added.
featureAutomatically redirect HTTP requests to HTTPS for convenience.
featureTask logs can now be downloaded directly as text files for further inspection.
featureIt is now possible to choose the sort-order of the resource tree and to sort guests by name.
featureFix loading of changelogs in case additional package repositories are configured.
featureImprove editing of backup jobs:
featureAdd a filter to the columns of the guest selector.
featureShow selected, but non-existing, guests.
featureRemove the "Storage View" mode from the resource tree panel.
featureThe Proxmox Backup Server specific columns for verification and encryption status can now be used for sorting in the backup content view of a storage.
featurePolish the user experience of the backup schedule simulator by splitting the date and time into two columns and better check the validity of the input fields.
featureImprove accessibility for screens with our minimal required display resolution of 720p
featureadd scrolling overflow handler for the toolbar of the backup job view
featurerework the layout of the backup job info window for better space usage and reduce its default size
featureFix search in "Guests without backup" window.
featureNode and Datacenter resource summary panels now show the guest tag column by default.
featureShow role privileges when adding permissions.
featureAllow the use of the `-` character in snapshot names, as the backend has supported this for some time.
featureUpdate the noVNC guest viewer to upstream version 1.4.0.
featureFix overly-strict permission check that prevented users with only the VM.Console privilege from accessing the noVNC console.
featureAlign permission check for bulk actions with the ones enforced by the API.
featureInvalid entries in advanced fields now cause the advanced panel to unfold, providing direct feedback.
featureHTML-encode API results before rendering as additional hardening against XSS.
featureFix preselection of tree elements based on the URL after login.
featureFix race condition when switching between the content panel of two storage before one of them hasn't finished loading.
featureMetric server: Expose setting the verify-certificate option for InfluxDB as advanced setting
featureReplace non-clickable checkbox with icons for backup jobs, APT repositories, and replication jobs.
featureFix error when editing LDAP sync setting and only a single parameter is not set to a non-default value.
featureAdd missing online-help references for various panels and edit windows.
breakingIn QEMU 7.2, it is a hard error if audio initialization fails rather than a warning.
breakingWith pve-edk2-firmware >= 3.20221111-1 we know of two issues affecting specific set ups: Possible workarounds are to assign more memory or to use kvm64 as the CPU type. The background for this problem is that OVMF << 3.20221111-1 used to guess the address (bit) width only from the available…
breakingvirtual machines using OVMF/EFI with very little memory (< 1 GiB) and certain CPU types (e.g. host) might no longer boot.
breakingThe (non-default) PVSCSI disk controller might result in SCSI disk not being detected inside the guess in regressions.
breakingBecause of hardware errata, the XSAVES feature had to be disabled by the kernel for certain AMD CPUs, resulting in start issues with VMs and certain VM CPU types like EPYC-ROME.
+94 more items in the release notes
7.3 Nov 22, 2022 Release notes ↗
featureCeph Quincy support. It is also the default for new installations
featureInitial Cluster Resource Scheduling (CRS) support
featureTags for Virtual Guests in web-interface for better categorizing/searching/...
featureSupport for Proxmox Offline Mirror to update and manage subscriptions of air gapped systems
featureShow tags for virtual guests in the resource tree and allow edits.
featureImproved UX for mediated PCIe devices - they now also show the name.
featureImproved Certificate View - for example for certificates with many SANs.
featureNode disk UI: gracefully handle adding the same local storage (e.g. a zpool with the same name) to multiple nodes.
featureExpose node configurations like wakeonlan and the delay for starting guests on boot for each node in the web interface.
featureImproved translations, among others:
featureArabic
featureDutch
featureGerman
featureItalian
featurePolish
featureTraditional Chinese
featureTurkish
featureImprove rendering complex formats in the api-viewer widget
featureNew major version of QEMU 7.1
featureSupport for pinning a VM to certain CPU cores via taskset
featureIn the web interface, new VMs default to iothread enabled and VirtIO SCSI-Single selected as SCSI controller (if supported by the guest OS)
featureNew VMs use qemu-xhci USB controller, if supported by the guest OS (Windows >= 8, Linux >= 2.6)
featureAllow up to 64 rx and tx multi-queues (previously 16)
featureLonger timeouts between sending SIGTERM and SIGKILL to allow for a cleanup upon termination
featureNew major LXC version 5.0.0
featureSupport for newer distribution versions:
featureNew pre-made templates available for:
featureAdd option to disable MAC learning on bridges (the guest-mac addresses are added statically, no broadcast packets are flooded to those ports, thus no spurious answers are replied, which broke certain hoster network setups)
featureImprove cleanup of backup-jobs upon purging the configuration for a removed VM
featureOptionally restart a guest after rollback to snapshot
featureFramework for remote migration to cluster-external Proxmox VE hosts
featureCluster Resource Scheduling (CRS) tech-preview: Improve new-node selection for when the HA Manager needs to find a new host node for a HA service, in the following cases:
featureImproved namespace support for the Proxmox Backup Server storage type
featureAdded option repeat-missed, allowing one to opt-out from the default behavior of running missed jobs on a new boot
featureThe VM used for single-file-restore with QEMU guests now has support for increasing its memory (e.g. to handle many ZFS datasets inside the guest)
featureImproved UX when creating new clusters
featureAdded heuristic checks if it is OK to stop or remove a ceph MON, MDS, or OSD service.
securityFirewall security groups can now be renamed with the changes directly being picked up from pve-firewall
securityImproved input sanitization of API URLs as additional security layer.
breakingVirtual Guest Tags: Duplicate tags are now filtered out when updating the tag property of a virtual guest. Duplication detection and sorting is handled case-insensitive by default, all tags are treated lower case. One can change that in the datacenter.cfg configuration using the case-sensitive…
+76 more items in the release notes
7.2 Sep 25, 2026 Release notes ↗
otherBased on Debian Bullseye (11.3)
otherCeph Pacific 16.2.7
otherCeph Octopus 15.2.16 (continued support until mid 2022)
otherKernel 5.15.30
otherLXC 4.0
featureAllow for safe reassignment of a VM disk or CT volume to another guest on the same node.
featureSupport configuring the range that new VMIDs are selected from when creating a VM or CT.
featureAllow assigning up to 16 PCI(e) devices to a VM via the web interface.
featureAdd support for the accelerated virtio-gl (VirGL) display driver.
featureSupport for importing disk-images via the API - currently not available in the GUI.
featureSupport for reading OVF files via the API - currently not available in the GUI.
fixFixed issues that occur in certain storage layouts, when migrating local VM state volumes, such as the TPM state or cloud-init.
featureSupport for NixOS container templates
featureProvide new pre-made templates for:
featureAdd target-storage support to migration.
featureAllow lazytime mount option for containers.
fixFix an issue with wrong ownership for files/directories created by the container stack on unprivileged containers.
featureHA Manager ha-manager uses a statically configurable number of workers to handle the services, by scheduling jobs in repeating scheduling rounds with a time-slice of 10s max. Since the services that have already started must also be checked to ensure that they are still in the target state, it…
breakingHandle an edge case where a node would get stuck in fence state, if all services were removed from it before the node actually fenced itself.
featureThe ha-simulator can now better help to test races in scheduling (on the different nodes) by introducing a skip-round
featureBackup/Restore With this, useful meta-information can be added, allowing backups to be easier to distinguish, so that a relevant one can be found quickly if required. Note templates can contain template variables like {{guestname}} or {{cluster}}. In addition to the existing weekday, time and time…
featureAllow for the configuration of a notes-template for backup jobs, which will be evaluated once the job runs and added to each resulting backup of said job.
featureDates: For example 2015-10-21 or *-12-31 23:50 (New Year's Eve, 10 minutes before midnight every year)
featureAdd a 'max-protected-backups' property to the storage definitions, to address issues with running into the configured general limit, due to having protected backups on the storage which should not count towards it.
featureAdd a job-init hook that is run once upfront, on each node that hosts guests which are included in the backup job.
featureSupport creating and destroying erasure coded pools, which can also be added as Proxmox VE Storage entries.
featureSupport for selecting existing custom device classes when adding OSDs through the web interface.
featureAccess Control Administrators can now choose if the user and all their configured values (for example TFA configurations, ACL entries) are set to the state in LDAP, or if only the users are added/removed, while their properties remain. This makes it possible to handle removed users, without losing…
fixFixed an issue with using Azure as an OpenID provider (unexpected Content-Type-Encoding leading to rejected logins).
featureAdd support for configuring anycast addresses on guests, by advertising the whole subnet to the EVPN network.
featureAdd configuration for allowing exit-notes to reach guests inside the EVPN network, for example if they need to talk with a DNS server running inside a virtual guest.
featureSupport for floating IPs on guests (by not suppressing ARP/ND packets).
featureImproved support for notches and full-screen mode.
featureUpdated memtest86+ to the completely rewritten 6.0b version, adding support for UEFI and modern memory like DDR5.
featureSupport for restricting the partitioned space for BTRFS installs, in order to leave unpartitioned space, which can be used for swap, for example.
featureSupport for creating RAID0 configurations with differently sized disks.
fixBetter support for installing ZFS on Systems with certain bugs in their UEFI implementation (HP Thin clients).
fixNotable bug fixes This has been fixed with QEMU 6.2.0 by initializing the relevant bitmap early enough.
fixSystems passing through a GPU may be affected from the switch to the SYS_FB (system frame buffer) KConfig build options using the simplefb module as driver in the new default 5.15 based kernel. The sys-fb allows taking over the FB from the firmware/earlier boot stages. Note that Proxmox VE uses…
featureSetups using vendor-reset for PCIe pass through need to adapt to changes of the new default 5.15 based kernel, see For details see this issue. They must run the command echo 'device_specific' > /sys/bus/pci/devices/<PCI-ID>/reset_method before the VM is started. This can be automated by using a…
+83 more items in the release notes
7.1 Nov 17, 2021 Release notes ↗
otherBased on Debian Bullseye (11.1)
otherCeph Pacific 16.2.6
otherCeph Octopus 15.2.15 (continued support until mid 2022)
featureEnhancements in the web interface (GUI): Backup jobs are now run by a new scheduler daemon (pvescheduler) and support the same more flexible calendar-event schedules already known from the verify and garbage-collection jobs in Proxmox Backup Server. Brings the powerful and flexible retention…
featureAdd Schedule Simulator tool to the backup job overview panel to help get the calendar event format right.
featureAdded a combo box under advanced options, for selecting the asynchronous IO mode for each disk of a virtual machine.
featureAdd a Notes panel for the datacenter. It can interpret Markdown and render it as HTML.
featureSupport for WebAuthn (superseding U2F) and one-time recovery keys.
featureSupport for configuring multiple factors for a single account.
featureVirtual Machines (KVM/QEMU): Newly created VMs have support for secure boot verification, with an option to have Linux distribution and Microsoft keys pre-enrolled. Support for adding a Trusted Platform Module to any VM, fulfilling the requirements of modern operating systems, for example Windows…
featureSupport for Windows 11 OS type
featureAllow re-assigning a disk to another VM.
featureEnable the nesting feature for new unprivileged containers created via the web interface. The nesting feature ensures better interoperability with modern systemd versions used in newer templates.
featureAllow re-assigning a mount point volume to another container.
featureImproved support for restoring backups of privileged containers as unprivileged ones (use of unprivileged containers is strongly recommended wherever possible).
featureAdded support for container CPU-sets on hosts with cgroupv2 layout.
fixUpdated corosync to include bug-fixes for issues occurring during network recovery.
featureDisk Management Added more fine-grained control over what part of a disk you want to clean up for re-use.
featureSupport for zstd compression when creating a new zpool via API/GUI.
featureBackup/Restore Backup jobs are now run by a new scheduler daemon (pvescheduler) and support the more flexible schedule-options known from Proxmox Backup Server verify and garbage collection jobs (which in turn are inspired by systemd-timers).
featureSupport for protected backups, which will not be pruned and cannot be removed manually, without removing the protected flag.
featureFull support for configuring external Ceph clusters via API.
featureAdd support for multiple 2nd factors.
featureAdd recovery keys as 2nd factor.
featureAdd WebAuthn 2nd factor support.
fixA bug in proxmox-boot-tool, which could make a Proxmox VE system running the 5.11 kernel unbootable upon upgrade, was fixed.
breakingAPI deprecations, moves and removals
breakingThe /version API method now only returns the console setting of the datacenter config, instead of all settings (use the /cluster/options instead).
breakingCLI changes
breakingqm: rename move_disk command to move-disk with an alias for backward compatibility.
breakingConfig file changes
breakingThe /etc/sysctl.d/pve.conf snippet has been moved to /usr/lib/sysctl.d/10-pve.conf, in accordance with current recommendations (see sysctl.d(5)). Local modifications need to be re-enabled again - they are preserved in /etc/sysctl.d/pve.conf.dpkg-old).
breakingTwo-Factor Authentication:
breakingKeys stored by admins in the user entry (this is how it worked back before the users could add TOTP and U2F keys themselves, and how it worked for Yubico OTP until now) are now deprecated.
breakingThe two-step login procedure in the API has been changed to work like in the Proxmox Backup Server. For now, the new procedure is opt-in and the old one still works, but is deprecated.
featureKeys stored by admins in the user entry (see above) still work, but will not be visible in the TFA panel until that user’s TFA configuration has been updated once, by registering any new TFA entry, such as by adding recovery keys.
featureWhen in a cluster, changes to TFA entries can only be done after all nodes have been upgraded, since the TFA configuration file format changed and will be automatically upgraded to the new format with the first change.
featureWith the addition of pvescheduler - the new backup schedules are no longer configured in the cluster-wide /etc/pve/vzdump.cron file. While this file is still read and will remain supported for the foreseeable future, changing an existing backup schedule will cause the schedule to be stored in the…
fixLow potential for full-cluster fencing event when upgrading HA-enabled clusters using libknet1 version 1.21-pve1 If a separate network is used for corosync/kronosnet the chance that the bug can get triggered is highly reduced. See bug #3672 for details.
fixUnder certain network load situations, that is one set of nodes having very low left-over bandwidth and another set has a lot of available bandwidth, a cluster (partly) running libknet1 version 1.21-pve1 can trigger a bug in corosync/kronosnet. With HA enabled this can then lead to a fencing event…
+58 more items in the release notes
7.0 Aug 31, 2021 Release notes ↗
featureCeph Pacific 16.2 as new default
featureLinearly increase the delay of subsequent scans for a device with an ISO image, bringing the total check time from 20s to 45s. This allows for the detection of very slow devices, while continuing faster in general.
securitySupport for security keys (like YubiKey) as SSH keys, when creating containers or preparing cloud-init images.
breakingAccess Control: You can integrate external authorization servers, either using existing public services or your own identity and access management solution, for example, Keycloack or LemonLDAP::NG. See breaking changes below for some possible impact in custom created roles.
featureSingle-Sign-On (SSO) with the new OpenID Connect access realm type.
featureAdded new permission Pool.Audit to allow users to see pools, without permitting them to change the pool.
featureVirtual Machines (KVM/QEMU): The new default can be overridden in the guest config via qm set VMID --DRIVE EXISTING-DRIVE-OPTS,aio=native (where, for example, DRIVE would be scsi0 and the OPTS could be get from qm config VMID output). With this new default value, data loss is also prevented by…
featureQEMU 6.0 has support for io_uring as an asynchronous I/O engine for virtual drives - this is now the default for newly started or migrated guests.
featureSupport for containers on custom storages.
breakingContainers: The force parameter to pct migrate, which enabled the migration of containers with bind mounts and device mounts, has been removed. Its functionality has been replaced by marking the respective mount-points as shared.
featureHigh Availability (HA): This reduced the possible subtle impact of an active watchdog after a node was cleared of HA services, for example, when HA services were previously only configured for evaluation. This gains a clear distinction between to be fenced services and the services whose node…
featureRelease LRM locks and disable watchdog protection if all services of the node the LRM is running on, got removed and no new ones were added for over 10 minutes.
featureAdd a new HA service state recovery and transform the fence state in a transition to that new state.
featureAllow manually disabling HA service that currently are in recovery state, for more admin control in those situations.
deprecatedThe maxfiles parameter has been deprecated in favor of the more flexible prune-options.
deprecatedDefault to the modern ifupdown2 for new installations using the Proxmox VE official ISO. The legacy ifupdown is still supported in Proxmox VE 7, but may be deprecated in a future major release.
featureDue to the design limitations of systemd-timesync, which make it problematic for server use, new installations will install chrony as the default NTP daemon.
featureSupport for Ceph 16.2 Pacific
featureImproved support for IPv6 and mixed setups, when creating a Ceph monitor.
featureBeginning with Ceph 16.2 Pacific, the balancer module is enabled by default for new clusters, leading to better distribution of placement groups among the OSDs.
featureSupport for Btrfs as technology preview
featureAdd an existing Btrfs file system as storage to Proxmox VE, using it for virtual machines, container, as backup target or to store and server ISO and container appliance images.
breakingThe outdated, deprecated, internal DRBD Storage plugin has been removed. A derived version targeting newer DRBD is maintained by Linbit[footnotes 7.0 1].
featureWiping disks is now possible from the GUI, enabling you to clear disks which were previously in use and create new storages on them. Note, wiping a disk is a destructive operation with data-loss potential.
featureThe ACME standalone plugin has improved support for dual-stacked (IPv4 and IPv6) environments and no longer relies on the configured addresses to determine its listening interface.
breakingPool permissions
breakingVZDump
breakingHookscript: The TARFILE environment variable was deprecated in Proxmox VE 6, in favor of TARGET. In Proxmox VE 7, it has been removed entirely and thus, it is not exported to the hookscript anymore.
breakingThe size parameter of vzdump has been deprecated, and setting it is now an error.
breakingAPI deprecations, moves and removals
breakingThe upgrade parameter of the /nodes/{node}/(spiceshell|vncshell|termproxy) API method has been replaced by providing upgrade as cmd parameter.
breakingThe /nodes/{node}/cpu API method has been moved to /nodes/{node}/capabilities/qemu/cpu
breakingThe /nodes/{node}/ceph/disks API method has been replaced by /nodes/{node}/disks/list
breakingThe /nodes/{node}/ceph/flags API method has been moved to /cluster/ceph/flags
breakingThe db_size and wal_size parameters of the /nodes/{node}/ceph/osd API method have been renamed to db_dev_size and wal_dev_size respectively.
breakingThe /nodes/<node>/scan/usb API method has been moved to /nodes/<node>/hardware/usb
breakingCIFS credentials have been stored in the namespaced /etc/pve/priv/storage/<storage>.pw instead of /etc/pve/<storage>.cred since Proxmox VE 6.2 - existing credentials will get moved during the upgrade allowing you to drop fallback code.
breakingThe external storage plugin mechanism had a ABI-version bump that reset the ABI-age, thus marking an incompatible breaking change, that external plugins must adapt before being able to get loaded again.
breakingqm|pct status <VMID> --verbose, and the respective status API call, only include the template line if the guest is a template, instead of outputting template: for guests which are not templates.
breakingqm vncproxy now always requires a password to be set via the LC_PVE_TICKET environment variable.
+63 more items in the release notes
6.4 Apr 28, 2021 Release notes ↗
otherBased on Debian Buster (10.9)
otherCeph Octopus 15.2.11 and Ceph Nautilus 14.2.20
otherKernel 5.4 default
otherKernel 5.11 opt-in
otherLXC 4.0
otherQEMU 5.2
featureZFS 2.0.4 - new major version
otherVirtual Machines (KVM/QEMU): This improves stability and guarantees that the hardware layout can stay the same even with newer QEMU versions. Note that some QMP timeout log messages are still being investigated, they are harmless and only of informative nature.
otherSupport pinning a VM to a specific QEMU machine version.
otherAutomatically pin VMs with Windows as OS type to the current QEMU machine on VM creation.
otherAddress issues with hanging QMP commands, causing VMs to freeze on disk resize and indeterministic edge cases.
featurecloud-init: re-add Stateless Address Autoconfiguration (SLAAC) option to IPv6 configuration.
otherImprove output in task log for mirroring drives and VM live-migration.
otherContainer
otherImproved cgroup v2 (control group) handling.
otherSupport and provide appliance templates for Alpine Linux 3.13, Devuan 3, Fedora 34, Ubuntu 21.04.
featureBackup and Restore The file-restore is available in the GUI and in a new command line tool proxmox-file-restore. No more watching the task log, waiting for a restore to finish; VMs can now be brought up while the restore runs in the background.
featureImplement unified single-file restore for virtual machine (VM) and container (CT) backup archives located on a Proxmox Backup Server.
otherLive-Restore of VM backup archives located on a Proxmox Backup Server.
otherConsistent handling of excludes for container backups across the different backup modes and storage types.
otherContainer restores now default to the privilege setting from the backup archive.
otherCeph Server
featureImprove integration for placement group (PG) auto-scaler status and configuration. Allow configuration of the CRUSH-rule, Target Size and Target Ratio settings, and automatically calculating the optimal numbers of PGs based on this.
otherStorage This separation helps in situations where a pool was imported but not mounted, and executing another import command failed.
otherSupport editing of backup notes on any CephFS, CIFS or NFS storage.
otherSupport configuring a namespace for accessing a Ceph pool.
otherImprove handling ZFS pool by doing separate checks for imported and mounted.
otherDisk Management
otherReturn partitions and display them in tree format.
otherImprove detection of disk and partition usage.
otherEnhancements in the web interface (GUI)
otherShow current usage of host memory and CPU resources by each guest in a node's search-view.
otherUse binary (1 KiB equals 1024 B instead of 1 KB equals 1000 B) as base in the node and guest memory usage graphs, providing consistency with the units used in the current usage gauge.
otherMake columns in the firewall rule view more responsive and flexible by default.
otherImprove Ceph pool view, show auto-scaler related columns.
otherSupport editing existing Ceph pools, adapting the CRUSH-rule, Target Size and Target Ratio, among other things.
featureAllow use of InfluxDB instances placed behind a reverse-proxy.
fixFixes in the API schema to prevent storing rules with a big IP-address list, which get rejected by iptables-restore due to its size limitations. We recommended you to create and use IP-Sets for that use case.
featureNew default bind address for pveproxy and spiceproxy, unifying the default behavior with Proxmox Backup Server Should you wish to prevent it from listening on IPv6, simply configure the IPv4 wildcard as LISTEN_IP in /etc/default/pveproxy: LISTEN_IP="0.0.0.0" 192.168.16.68 - root@pam…
securityResolving the Ceph `insecure global_id reclaim` Health Warning With Ceph Octopus 15.2.11 and Ceph Nautilus 14.2.20 we released an update to fix a security issue (CVE-2021-20288) where Ceph was not ensuring that reconnecting/renewing clients were presenting an existing ticket when reclaiming their…
+18 more items in the release notes
6.3 Nov 26, 2020 Release notes ↗
otherBased on Debian Buster (10.6)
otherCeph Octopus 15.2.6 (first stable release) and Ceph Nautilus 14.2.15
otherKernel 5.4 LTS
otherLXC 4.0
otherQEMU 5.1
otherZFS 0.8.5
otherProxmox Backup Server Integration
otherStable Proxmox Backup Server integration: The stable version 1.0 of Proxmox Backup Server is now integrated and enterprise support is available from the Proxmox support team.
otherData encrypted on client-side before backing up to Proxmox Backup Server.
otherCeph
otherStable integration of Ceph Octopus.
featureAdd selector to choose which supported Ceph version to install in the GUI configuration wizard.
otherRecovery progress is displayed in the Ceph status panel.
featureShow and allow setting of Placement Group (PG) auto-scaling mode of Ceph pools.
otherSet device class when creating OSDs, especially if the auto-detection yields the wrong class.
otherEnhancements in the GUI
otherImproved VM boot device order editor:
otherIt is now possible to select multiple devices per type (disk, network) for booting.
otherBooting from passed through PCI devices (e.g., NVMe drives) is supported.
otherImproved user experience with a drag-and-drop UI.
otherGUI for editing external metric servers: You can now connect your Proxmox VE nodes to InfluxDB or Graphite using the GUI, instead of having to manually edit /etc/pve/status.cfg
otherOptional TLS certificate verification for LDAP and AD authentication realms.
otherImprove high-DPI display and browser zoom compatibility.
featureAdd highly flexible backup retention with "keep" settings: The new backup retention settings, which augment and replace the "Max Backups" setting, enable you to decide how many backups to keep per timeframe and implement enhanced retention policies per storage or backup job.
featureAdd support for current Devuan containers.
featureAdd support for Kali Linux containers.
featureAdd a debug parameter to pct start, to output the debug log of the container start.
fixFix aborting of backups on Ceph backed containers with a large IO load, by issuing fsfreeze before snapshotting.
featureAllow pass through of certain older Intel iGPU models with QEMU's 'legacy-igd' mode.
featureBetter support for hugepages across multiple NUMA nodes.
featureImproved support for using client certificates/keys when connecting to AD/LDAP realms.
featureOptional support for case-insensitive logins with AD/LDAP realms.
featureAdd section about ZFS pool design choices.
featureAdd documentation on requirement for encrypted ZFS datasets as storage.
featureAdd manpage for cpu-models.conf(5).
featureExperimental: support for Software-Defined Networking (SDN)
featureSupport for IPAM with a plugin framework.
featureAdd support for internal IPAM management and PowerDNS.
fixCountless bug fixes and smaller improvements
featureVM guests with multiple boot disk setups (e.g., mdadm, LVM, etc...) need to be configured with the new boot order config so that all required disks are marked "bootable", with the one containing the boot loader placed first - otherwise, the guest may fail to boot after being restarted with the new…
+41 more items in the release notes
6.2 May 12, 2020 Release notes ↗
otherBased on Debian Buster (10.4)
otherCeph Nautilus (14.2.9)
otherKernel 5.4 LTS
otherLXC 4.0
otherQemu 5.0
otherZFS 0.8.3
otherWeb interface
featureAllow to deploy DNS based Let's Encrypt (ACME) certificates
featureAllow admins to see the full granted permission/privilege tree for a user
featureAdd experimental Software Defined Network (SDN) GUI and documentation, based on modern mainline Linux Kernel network technology
featureAllow to collapse the Notes sub-panel in the guest summary panels. One can do this permanently or automatically if empty through the user settings.
featureAdd 'Creation Date' column for storage content, allowing one, for example, to comfortably find backups from a certain date
featureAdd device node creation to Container feature selection
featureFull support for up to 8 corosync links
otherAutomatic guest console reload on VM/CT startup
featureAdd Arabic translation
featureAllow seamlessly changing the language, without logging out and logging in again
otherContainer
otherLXC 4.0.2 and lxcfs 4.0.3 with initial full cgroupv2 support by Proxmox VE
featureImprove support for modern systemd based Containers
otherImprove default settings to support hundreds to thousands* of parallel running Containers per node (* thousands only with simple distributions like Alpine Linux)
featureAllow creating templates on directory-based storage
otherBackup/Restore
featureSupport for the highly efficient and fast Zstandard (zstd) compression
otherImprovements to the HA stack
featureAllow to destroy virtual guests under HA control when purge is set
otherQEMU
fixFixed EFI disk behavior on block-based storage (see known issues)
featureVirtIO Random Number Generator (RNG) support for VMs
otherCustom CPU types with user-defined flags and QEMU/KVM settings
otherImproved machine type versioning and compatibility checks
otherVarious stability fixes, especially for backups and IO-Threads
featureEnable support for Live-Migration with replicated disks
featureAllow specifying target storage for offline mode
featureAllow specifying multiple source-target storage pairs (for now, CLI only)
featureAdd versioning for cluster join
featureEnable full support for up to 8 corosync links
featureStorage migration: introduce allow-rename option and return new volume ID if a volume with the same ID is already allocated on the target storage
featureImprove metadata calculation when creating a new LVM-Thin pool
featureAllow to add and manage authentication realms through the 'pveum' CLI tool
+30 more items in the release notes
6.1 Sep 25, 2026 Release notes ↗
otherBased on Debian Buster (10.2)
otherCeph Nautilus (14.2.4.1)
otherCorosync 3.0
otherKernel 5.3
otherLXC 3.2
otherQemu 4.1.1
otherZFS 0.8.2
otherWeb interface
otherMore datacenter configuration options are now editable via GUI:
otherU2F two-factor settings.
otherCluster-wide bandwidth limit for the following traffic types: migration, backup-restore, clone, disk-move.
otherImprovements to two-factor authentication allowing to use a hardware-based TOTP key.
featureMobile GUI: implemented login for TOTP-based two-factor authentication enabled user accounts.
otherMore icons have been converted from bitmap to vectorized icons from Font Awesome.
otherThe scale mode of noVNC can be changed in "My Settings".
otherAddition of Hebrew language translations.
featureNew "Run now" button for cluster-wide backup jobs.
otherWith ifupdown2 installed, it is now possible to change the network configuration and reload it from the GUI without a reboot.
otherContainer
otherPending changes for containers. It is possible to make changes to a running container. They will be applied after the next reboot of the container.
otherReboot of a running container via GUI, API, and command-line interface.
featureHot plugging of mount points by using the new mount API available with Linux Kernel 5.3.
otherSupport of recent releases of GNU/Linux distributions like Fedora 31, CentOS 8, and Ubuntu 19.10.
otherSPICE
featureAudio devices can now be added via GUI (no need to edit the configuration file).
otherFolders can now be shared between SPICE client and VM (still experimental).
otherVideo streaming can be enabled. This can help to improve the performance of fast-changing display areas like videos.
otherThe SPICE USB device now supports USB3 (Qemu >= 4.1).
featureNew 'migrate' shutdown policy. If enabled, running services will be migrated to another node on shutdown. Once the node comes back, and if the services have not been manually moved to another node in the meantime, those services will move back.
featureNew 'crm-command stop'. Shuts down a VM/container with the specified timeout and performs a hard stop if the timeout is 0. A VM or container stop command will now be redirected to this new crm-command.
featureAllow domains other than '0000' for PCI(e) passthrough.
featureNew 'reboot' API call. This allows to apply pending changes without having to wait for the guest to shutdown before starting it again.
featureSupport for QEMU Guest Agents using an ISA serial port (not VirtIO) for communication, allows to use the QGA with FreeBSD - among others.
featureAllow 'tags' in the guest configuration. This meta-information can be useful for things like configuration management (no GUI support yet).
featureVM/CT: Purge allows to remove the corresponding virtual machine or container from replication or backup jobs on destruction.
fixA number of bugs have been identified and fixed upstream in cooperation with corosync and kronosnet.
featureAllow configuration of non-default 'mountpoint' properties for ZFS.
featureAllow .img files as alternative to .iso images.
featureFirewall: Added support for 'raw' tables and use them to allow users to enable and configure Synflood-Attack protections.
fixCountless bug fixes and package updates (for all details see bugtracker and GIT)
+21 more items in the release notes
See how far your stack has drifted from upstream. Release data from vendors’ own sources · feed under CC BY 4.0 · Code under AGPL-3.0 Settings Feed status