Proxmox VE 7.2 → 9.2.17

107 releases · 89 breaking changes · 16 security fixes · 2 advisories fixed

16security89breaking19deprecated472feature140fix

Is 7.2 affected? · What changed up to 9.2.21

Vulnerabilities fixed by this upgrade

8.8 CVE-2023-43320 An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1.1 thru v.3.0, and Proxmox Mail Gateway v.7.1 thru v.8.0 allows a remote authenticated attacker to es…
9.0 CVE-2022-31358 A reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web scripts or HTML via non-existent endpoints under…

Breaking changes

breaking ask for the checks that prove an OSD is gone before its leftover lockbox key is removed, and no longer suggest removing the authentication entry of a daemon that only seems gone in 9.2.15
breaking api: ceph: mds: deprecate hotstandby parameter in the API schema, and do not set the mds_standby_for_name and mds_standby_replay config options any more, they were removed in Ceph 14.1 and setting them has no effect any more in 9.2.10
breaking ui: qemu: default aarch64 VMs to a KVM-usable CPU model instead of one that QEMU rejects at start, and warn when an incompatible ARM CPU model is selected. in 9.2.9
breaking Remove redundant checks for USB hotplug support and unplug events during unrelated VM configuration changes. in 9.2
breaking Windows VMs using machine versions 11.0 or 11.0+pve1 are potentially affected by this issue. Such guests may have been created with the packages available in the Proxmox VE 9.2 ISO or qemu-server older than 9.2.0. Upgrading the qemu-server package and setting the machine version to 11.0+pve2 or… in 9.2
breaking Windows VMs using machine version 11.0+pve2 or newer are not affected by this issue. Under qemu-server 9.2.0 or later, new Windows VMs are created with an unaffected machine version. in 9.2
breaking Windows VMs using machine versions older than 11.0 are not affected if using qemu-server 9.2.0 or newer. in 9.2
breaking ui: sdn: fabrics: add management UI for the new WireGuard fabric protocol. New panels under Datacenter > SDN > Fabrics let users create and edit WireGuard interfaces with their peer references on internal nodes, manage external peer definitions, and review per-node available peers. Public keys,… in 9.1.12
breaking fix #2077: pvenode: drop dependency on GNU readline Perl module in favor of our own PTY module. While it's less flexible, it's much simpler and robust, and–more importantly–it has no issues with being instantiated more than once, which recently became an error in the readline module, breaking EAB… in 9.1.2
breaking Remove notice marking AMD SEV-ES and SEV-SNP as highly experimental. in 9.1
breaking Remove the computed and obsolete group field from the service status data. in 9.1
breaking Remove obsolete checks and warnings concerning RRD migration. in 9.1
breaking ui: ha: remove default focus from VM/CT dropdown in resource edit window to avoid opening the picker immediately when opening the window. in 9.0.12
breaking ui: guest snapshot: remove excess '}' at the end of window title in 9.0.11
breaking Container setup does not generate a DSA SSH host key anymore, as OpenSSH removed support for DSA. in 9.0
breaking Drop support for GlusterFS starting with PVE 9, as it is unmaintained. in 9.0
breaking Remove an outdated warning about entropy starvation when using /dev/random as an entropy source. in 8.4
breaking Rework and improve the Netbox IPAM plugin to properly synchronize the deletion and updates of addresses and networks (issue 5496). Refactor the code to consistently handle errors reported by Netbox. Delete subnets in Netbox after they are removed in Proxmox VE. Properly return the address after… in 8.4
breaking Manually create the IP Ranges in Netbox: in 8.4
breaking Go to IPAM → IP Ranges and add the DHCP ranges you have configured for your subnet manually in 8.4
breaking Let Proxmox VE recreate the IP Ranges: in 8.4
breaking Go to SDN → VNets in 8.4
breaking Edit the Subnet and delete all DHCP ranges, then click OK in 8.4
breaking Edit the Subnet, re-create the DHCP ranges, then click OK in 8.4
breaking Apply the SDN configuration in 8.4
breaking ui: remove warning about entropy starvation of /dev/random, it does not apply since kernel 5.6 anymore. in 8.3.6
breaking Improvements to Secure Boot management. With the need to update the revocation database embedded in the shim boot loader, some edge-cases were discovered and improved in the proxmox-secure-boot metapackage. Ship an apt pinning snippet to ensure that Proxmox provided packages are installed, even if… in 8.3
breaking ui: remove experimental from change detection modes description in 8.2.9
breaking Integrate patches that make it possible to manually install and use the upstream Ceph dashboard. Due to upstream changes, Proxmox VE 8.0 and 8.1 were incompatible with the Ceph dashboard. in 8.2
breaking Remove deprecated and now forbidden priority field from change request to PowerDNS (issue 5275). in 8.2
breaking Models using i40e. Their names can get an additional port suffix like p0 added. in 8.2
breaking d/postinst: make deb-systemd-invoke non-fatal to avoid potentially breaking an update for unrelated reasons in 8.1.11
breaking Remove the 10-minute timeout for allocating VM disks when restoring from backup, as this timeout may be exceeded if disks are large or network storage is involved (issue 2817). in 8.1
breaking Using the Console/Shell on a PVE node is now possible for all users with the appropriate permissions (Sys.Console). The restriction to the pam was removed. The users will still need to login as a system user on the shell though. in 8.1
breaking With Kernel 6.5 and ZFS it can happen that the host hits a kernel bug when starting a VM with hugepages, and the host must be rebooted. More information can be found in the forum and in the bug reports for ZFS and Linux kernel. in 8.1
breaking Some users with Intel Wi-Fi cards, like the AX201 model, reported that initialization of the card failed with Linux kernel 6.5. This is still being investigated. You should avoid booting into the new kernel if you have no physical access to your server and an Intel Wi-Fi device is used as its only… in 8.1
breaking Some SAS2008 controllers need a workaround to get detected since kernel 6.2, see the forum thread for details. in 8.1
breaking For certain Linux VMs with OVMF and guest kernels >= 6.5, there might be issues with SCSI disk hot(un)plug. This is a more general issue and is currently being investigated and will be fixed on Linux upstream. in 8.1
breaking The TPM (Trusted Platform Module) hardware random number generator (RNG) is now disabled on all AMD systems equipped with a firmware-based TPM (fTPM) device. This change was implemented due to such RNGs causing stutters in many systems. Affected systems should switch the RNG source from /dev/hwrng… in 8.1
breaking Some Dell models, which appear to include all those using a BCM5720 network card, have a compatibility issue with the tg3 driver in the kernel based on version 6.5.11. From our current understanding 14th Generation Dell Servers (T140, R240, R640,...) are affected, while others (e.g., R630, R620,… in 8.1
breaking Systems installed on top of Debian or those installed before Proxmox VE 7.0 will be switched by default from the ifupdown network configuration implementation to the modern ifupdown2. This switch occurs because the stabilized SDN package is now marked as a recommendation for various Proxmox VE… in 8.1
breaking The pve-edk2-firmware package, which provides (U)EFI firmware for virtual machines, has been split up in multiple packages. Users of the fully supported amd64/x86_64 architectures do not need to change anything. The OVMF variants, used for amd64/x86_64 based virtual machines, got moved into… in 8.1
breaking With the 8.1 machine version, QEMU switched to using SMBIOS 3.0 by default, utilizing a 64-bit entry point. Since the SMBIOS 32-bit and 64-bit entry points can coexist, and most modern operating systems set up both, the general impact should be minimal However, certain operating systems or… in 8.1
breaking api: osd destroy: remove the mclock max iops settings to avoid that it's reused when a new OSD gets the same OSD ID again in 8.0.8
breaking api: notification: remove notification groups and filters, they are replaced by a matcher based routing system. in 8.0.8
breaking subscription: remove ceph APT auth if invalid in 8.0.7
breaking Workaround breaking driver changes in newer Nvidia grid drivers, which prevented mediated devices (mdev) to be reclaimed upon guest exit. in 8.0
breaking Add support for new Ceph enterprise repositories. When installing Ceph via pveceph install or the web UI, you can now choose between the test, no-subscription and enterprise (default) repositories. The -test-repository option of the pveceph install command was removed. in 8.0
breaking Drop support for Ceph Octopus and Pacific, as they are not supported in Proxmox VE 8. in 8.0
breaking Remove overly restrictive validation of public_network during monitor creation. Configuring a public network like 0::/0 or 0::/1 caused a superfluous "value does not look like a valid CIDR network" error. in 8.0
breaking Remove the Permission.Modify privilege from the PVESysAdmin and PVEAdmin roles and restrict it to the Administrator role. This reduces the chances of accidentally granting privilege modification privileges. in 8.0
breaking Fix an issue where an allowed special ICMP-type could accidentally be added as destination port for a layer 4 protocol, breaking firewall rule loading. in 8.0
breaking Outdated pve6to7 compatibility check script was removed. in 8.0
breaking Firefox 79 (released on 2020-07-28) in 8.0
breaking Chrome/Chromium 85 (released 2020-08-25) in 8.0
breaking Safari 14 (released 2020-09-16) in 8.0
breaking Storage activation now checks that every content type uses a different directory, in order to prevent unexpected interactions between different content types. This breaks setups in which the content-dirs option was set up to map different content types to the same directory, and setups in which… in 8.0
breaking The mkdir option is considered deprecated, it got split into create-base-path and create-subdirs as fine-grained replacement. While Proxmox VE will continue to support this option during the 8.x release series, we recommend switching over to the new options already now. in 8.0
breaking Previous 6.2 kernels had problems with incoming live migrations when all of the following were true: in 8.0
breaking VM has a restricted CPU type (e.g., qemu64) – using CPU type host or Skylake-Server is ok! in 8.0
breaking the source host uses an Intel CPU from Skylake Server, Tiger Lake Desktop, or equivalent newer generation. in 8.0
breaking the source host is booted with a kernel version 5.15 (or older) (e.g. when upgrading from Proxmox VE 7.4) in 8.0
breaking Kernels based on 6.2 have a degraded Kernel Samepage Merging (KSM) performance on multi-socket NUMA systems. Until we either find a targeted fix for our kernel, or change the default kernel to a 6.5 based kernel (planned for 2023'Q4), the current recommendation is to keep your multi-socket NUMA… in 8.0
breaking Depending on the workload this can result in a significant amount of memory that is not deduplicated anymore. in 8.0
breaking This issue went unnoticed for a few kernel releases, making a clean backport of the fixes made for 6.5 hard to do without some general fall-out. in 8.0
breaking QEMU 8.0 removed some previously deprecated features. Proxmox VE 8 won't use the -chardev tty and -chardev parport aliases anymore, and no other features were used by the Proxmox VE stack. Thus, only installations using args inside their guest configs need to check the compatibility. See the Qemu… in 8.0
breaking The removed features in QEMU 8.0 also include the Proxmox VE-specific, but unused/deprecated QMP commands get_link_status, snapshot-drive and delete-drive-snapshot. in 8.0
breaking Only root@pam is now allowed to clone and restore guests with passed through PCI/USB devices that are not using the new mapping feature. To allow regular users to clone and restore with PCI/USB devices, create a mapping and give the user 'Mapping.Use' on that. in 8.0
breaking Trying to pass through the same PCI device multiple times in a single guest now fails earlier. A qm showcmd for example does not generate an output anymore in that case. in 8.0
breaking When passed through device is configured as multifunction (or 'All Functions' in the web UI) with a set mediated device (mdev) this now generates an error instead of a warning. Use the specific function instead. in 8.0
breaking cloud-init: If the VM name is not a FQDN and no DNS search domain is configured, the automatically-generated cloud-init user data now contains an additional fqdn option. This fixes an issue where the hostname was not set properly for some in-guest distributions. However, the changed user data will… in 8.0
breaking Migration doesn't scan all local storages for orphaned volumes anymore. Instead, only the volumes referenced in the configuration (including snapshots) are picked up. This avoids unexpected errors where an unavailable local storage could fail migration even if no volume referenced that storage. in 8.0
breaking The lxc.id_map configuration key has been deprecated for a long time by lxc and was replaced by lxc.idmap. With this release, its presence is considered an error. The key can only be present if it was manually added to a guest configuration. in 8.0
breaking The lxcfs is now built with fuse 3. This upgrade is done on a major release, since all running containers need to be restarted afterwards. in 8.0
breaking There is a new SDN.Use privilege (and corresponding PVESDNUser role) that is required to configure virtual NICs in guests. See "Access control" section above for details! in 8.0
breaking The Permission.Modify privilege has been removed from the PVESysAdmin and PVEAdmin roles, in order to reduce the chances of accidentally granting the privilege to modify privileges. If a particular setup requires a role with this privilege, it is necessary to define a new custom role and use that… in 8.0
breaking Users with VM.Allocate/Datastore.Allocate/Pool.Allocate privileges, but without the Permissions.Modify privilege, can now only assign a subset of their own privileges to specific VM/storage/pool paths. Previously they could assign any role to specific VM/storage/pool paths. As the privileges… in 8.0
breaking Editing backup jobs now generally requires the Datastore.Allocate privilege on the target storage, and editing backup jobs with dumpdir requires root privileges. in 8.0
breaking User accounts will now be locked after too many attempts to authenticate with a second factor. This is intended to protect against an attacker who has obtained the user password and attempts to guess the second factor. Unlocking requires either a successful login with a recovery key or a manual… in 8.0
breaking Systems booting via UEFI from a ZFS on root setup should install the systemd-boot-efi package after the upgrade. The systemd-boot was split out from the systemd package for Debian Bookworm based releases. It won't get installed automatically upon upgrade from Proxmox VE 7.4 as it can cause trouble… in 8.0
breaking The API can handle array-type data differently, while trying staying backward compatible. Instead of being able to pass the individual elements separated by null bytes, you can pass the data directly as array. in 8.0
breaking Before Proxmox VE 8, the API endpoint to trigger a QEMU guest agent (QGA) command execution (/nodes/{node}/qemu/{vmid}/agent/exec) allowed passing a command as a single string, which would then be automatically split at whitespace. This was deemed too brittle and is not supported anymore. You must… in 8.0
breaking The Open vSwitch (OVS) version shipped with Proxmox VE 8 / Debian Bookworm contains a bug that causes it to fail to provide a working network when run on a system with 2 CPU cores or less. This is caused by the handler responsible for filling the forward database (FDB) not being started, so… in 8.0
breaking In QEMU 7.2, it is a hard error if audio initialization fails rather than a warning. in 7.4
breaking With pve-edk2-firmware >= 3.20221111-1 we know of two issues affecting specific set ups: Possible workarounds are to assign more memory or to use kvm64 as the CPU type. The background for this problem is that OVMF << 3.20221111-1 used to guess the address (bit) width only from the available… in 7.4
breaking virtual machines using OVMF/EFI with very little memory (< 1 GiB) and certain CPU types (e.g. host) might no longer boot. in 7.4
breaking The (non-default) PVSCSI disk controller might result in SCSI disk not being detected inside the guess in regressions. in 7.4
breaking Because of hardware errata, the XSAVES feature had to be disabled by the kernel for certain AMD CPUs, resulting in start issues with VMs and certain VM CPU types like EPYC-ROME. in 7.4
breaking Virtual Guest Tags: Duplicate tags are now filtered out when updating the tag property of a virtual guest. Duplication detection and sorting is handled case-insensitive by default, all tags are treated lower case. One can change that in the datacenter.cfg configuration using the case-sensitive… in 7.3

Security changes

security Fix a boot issue for Windows guests with Virtualization-based Security (VBS) enabled by disabling the cet-ibt and cet-ss CPU flags. in 9.2
security Prevent local "copy.fail" privilege escalation exploit via AF_ALG sockets within containers by using seccomp filtering (PSA-2026-00018-1). If AF_ALG support is required in a specific container, see the security advisory forum post for more details. in 9.2
security Fine-grained control of nested virtualization for VM guests. Some VM guest workloads need access to the host CPU's virtualization extensions for nested virtualization. Examples are nested hypervisors or Windows guests with Virtualization-based Security enabled. The host CPU type makes all CPU… in 9.1
security Backport a fix for an out of bounds read vulnerability in libtpms, a library for integrating TPM functionality into QEMU (PSA-2025-00010-1). in 9.0
security Containers are now created as unprivileged containers by default. This was already the default when creating containers via the GUI, and it is now also the default when creating containers via API and CLI. Privileged containers lack security features and should only be used in trusted… in 9.0
security Fix security issues concerning image formats that would allow sufficiently privileged attackers read or read-write access to arbitrary host files. See PSA-2024-00014-1, PSA-2025-00001-1, PSA-2025-00003-1, PSA-2025-00004-1. in 8.4
security OVA/OVF import: Fix a security issue that would allow a sufficiently privileged attacker to obtain a copy of an arbitrary host file by importing a specifically crafted OVA appliance (PSA-2024-00013-1). in 8.4
security Skip generating rules in forward chains for security groups bound to an interface, instead of causing an error. Rules in the forward chain operate on multiple interfaces, and binding them to an interface does not make sense. in 8.4
security Several vulnerabilities in GRUB that could be used to bypass SecureBoot were discovered and fixed (PSA-2025-00005-1) The Documentation for SecureBoot now includes instructions to prevent using vulnerable components for booting via a revocation policy. in 8.4
security The selector for security groups now shows a tooltip for comments that are too long to fit within the column width (issue 5879). in 8.3
security Fix a security issue where an authenticated user with necessary privileges can trick the system into accessing arbitrary host block devices, including passing them through into guests as a volume. in 8.3
security Fix a security issue where authenticated attackers with Sys.Audit or VM.Monitor privileges could download arbitrary host files via the API. See PSA-2024-00009-1 for details. in 8.3
security Fix a RCE vulnerability in the shim bootloader used for Secure Boot support. See PSA-2024-00007-1 for details. in 8.3
security fix #5879: ui: add tooltip to security group comments in 8.2.9
security Firewall security groups can now be renamed with the changes directly being picked up from pve-firewall in 7.3
security Improved input sanitization of API URLs as additional security layer. in 7.3

Deprecations

deprecated Switch from the deprecated block-job-complete to the newer job-complete QMP command. in 9.2
deprecated Deprecate and warn about raw cgroup v1 entries in the container configuration. The support for cgroup v1 will be removed in a future release. in 9.2
deprecated Switch from the deprecated /etc/timezone to the recommended timedatectl to initialize the containers timezone setting (issue 7175). in 9.2
deprecated Deprecate the legacy starttime and dow parameters of the backup job API in favor of schedule. The legacy parameters were superseded by schedule since Proxmox VE 7.1 and have now been removed from the API response. in 9.2
deprecated api: backup: deprecate the legacy 'starttime' and 'dow' parameters in favor of 'schedule' and drop them from the API response, as they have been superseded since PVE 7.1. in 9.1.8
deprecated fix #7175: replace deprecated /etc/timezone handling with systemd timedatectl. in 9.1.7
deprecated api: workaround broken 'maxworkers' alias in bulk actions api calls. For the new, cluster-wide bulk actions, only the 'max-workers' spelling would have an effect. For the pre-existing node-specific bulk migration, an error would occur when specifying the deprecated 'maxworkers' spelling, causing… in 9.1.3
deprecated rrdtool is rebuilt to provide a native systemd unit file. The ListenStream directive was updated to not print a deprecation warning by using /run as directory for the socket. in 9.1
deprecated Clarify the handling of QEMU machine version deprecations. Starting with QEMU 10.1, machine versions will be removed from upstream QEMU after six years. Proxmox VE will support machine versions from approximately two previous major Proxmox VE releases. This is now documented, and QEMU will warn… in 8.4
deprecated Avoid passing the deprecated noacl mount option for ext4 formatted volumes (issue 4846). in 8.2
deprecated Deprecate notification options that were only relevant in a short transition period before the final notification system was introduced. in 8.2
deprecated Restrict the values of legacy user-keys to the ones that were allowed in the deprecated initial TFA system. in 8.2
deprecated Log a warning when starting a VM with a deprecated machine version. in 8.1
deprecated Mark global pg_bits setting as deprecated and make it a no-op. The setting has been deprecated since Ceph 13. in 8.1
deprecated ceph: mark global pg bits setting as deprecated in 8.0.8
deprecated api/acme: deprecate 'tos' endpoint in favor of new, more general, 'meta' one in 8.0.8
deprecated Replace usages of deprecated -no-hpet QEMU option with the hpet=off machine flag. in 8.0
deprecated The rsync invocation used when joining nodes via ssh, which is deprecated, has been adapted to changes in rsync CLI argument parsing in Bookworm. in 8.0
deprecated The access/ticket API endpoint does not support the deprecated login API (using new-format=0) anymore. in 8.0

Every release in between

9.2.17 Sep 5, 2026

otherceph: Cephx key migration:

featureadd '--rotate-all-storage-keys' to rotate dedicated users of local RBD and CephFS storages together, excluding external clusters and keeping 'client.admin' a separate choice

otherrefuse administrative and storage-user key rotation if any monitor cannot keep both keys valid while consumers refresh

otherkeep both keys valid during rollback until consumers return to the restored key and the operator confirms with '--confirm-abort-clients-refreshed'

otherdetect returning old-key consumers using monitor session fingerprints and recheck consumers before retiring keys or invalidating tickets

otherrefresh CephFS mounts without forced or lazy unmounts; retry busy mounts on a later apply run

otherleave pending daemon keys untouched when their ownership is unclear, and wait for monitor elections to finish before staging

fixcomplete bootstrap and crash key rotations without asking operators to confirm refreshes for Ceph's own tools

featuremake new keys use the new cipher before disabling the old cipher

othershow next steps based on current keys and settings, with concise consumer hints, storage inventories, and recovery instructions

otherceph: auth status: show current and pending key ciphers without exposing secrets, and lead with the next migration command.

9.2.16 Sep 3, 2026

otherceph: Cephx key migration:

featurestage eligible 'client.admin' and storage-user keys while their current keys remain valid, so consumers can refresh before the new key is committed. This requires Ceph 19.2.6-pve3, 20.2.4-pve3, or newer on every monitor; with an older monitor, replace the keys at once as before

otherjournal staged rotations so interrupted work resumes safely; if monitor support disappears, require completion or '--abort-staged-key' instead of falling back to immediate replacement

otherconfirm refreshed consumers per Ceph user or for all ready rotations at once. Refuse confirmation while a recorded consumer is still connected or a monitor did not answer the session query; refuse the all-at-once form entirely if any rotation is not ready

fixadd '--rotate-cluster-keys' as the concise path for the shared 'mon.', bootstrap, crash, and encrypted OSD lockbox keys

otherbefore replacing a Ceph user key at once, tell operators to stop every consumer because its next reconnect can fail immediately

otherprint concise plans by default with affected Ceph users, disruptive steps, warnings, and next commands; provide full inventories with '--verbose'

otheravoid duplicate notices and spurious unfinished records for Ceph user keys rotated by an earlier version of the helper

otherui: ceph: distinguish Cephx migration checks from availability and data health failures, show check-specific next steps, and link to the local documentation

9.2.15 Sep 2, 2026

fixfix #7896: ui: qemu: show the effective implicit machine version for Windows guests and avoid accidentally pinning a fallback when changing other machine settings

otherceph: cephx key migration:

othername the running consumers of every client key a run rotates, and report the recorded consumers that may still hold a replaced key and could fail on a reconnect or ticket expiry

otherconfirm a rotation only for the consumers a run cannot see: the confirmation is refused while a recorded consumer is connected, and an unmeasured rotation is measured first

featureadd --restrict-ciphers to drop the old cipher as a guarded final step, refused while any key depends on it or a recorded consumer may still do so

otherrefuse a rotating-key wipe while a recorded client may still hold a replaced key, and mark the wipe as not recommended, as it invalidates every service ticket and requires all clients and daemons to support aes256k

otheroffer the options that are still open as one command to paste, so the finish of the migration is visible

featureredo the mount of every CephFS storage whose key a run rotates, on each node, so it starts a fresh client with the new key; a mount that is in use is named rather than pulled away, and one that stopped answering is force-unmounted, which frees the processes blocked in it

otherrefuse to rotate a storage key while a pending key is staged for it, as that key would replace the fresh one on its first use and leave the storage copies mismatched

otherfail a run when a node stops answering instead of waiting forever

othersay that the service ticket switch and the cipher restriction make the monitors hold an election, a few seconds in which they do not answer

otherpoint at the independent monitor identity when the admin keyring no longer matches the cluster, instead of a bare permission error

otherignore data directories left by removed or destroyed OSDs while continuing to block existing OSDs without an authentication entry

otheridentify a stopped OSD device by its per-OSD UUID and refuse duplicate data directories, so a reused ID cannot direct a key write at old data

fixvalidate lockbox values as cephx keys rather than accepting any base64 data, and redact lockbox keys from LVM error output to keep them out of task logs and bug reports

breakingask for the checks that prove an OSD is gone before its leftover lockbox key is removed, and no longer suggest removing the authentication entry of a daemon that only seems gone

otherceph: osd: on destroy, remove the empty mount-point directory and the runtime unit enablement ceph-volume left behind, so the OSD stops being reported as a configured service before the next boot

9.2.14 Aug 28, 2026

otherceph: cephx key migration:

otherstop reporting an abort that never happened at the end of every apply run, which the lock heartbeat printed when the run released it

othernever remove the lockbox tag of an encrypted OSD when asked to write the key it already holds, and refuse a value that is not a key, so a mistake cannot leave that OSD unable to unlock

9.2.13 Aug 28, 2026

featurepartially fix #1989: ui: qemu: allow configuring the qcow2 cache size when creating or editing a disk, either directly or derived from the disk size, which can improve performance considerably for some guests

otherapi: apt: accept the HTTP proxy as a URI, so that a password can contain special characters

otherceph: cephx key migration:

featureadd '--rotate-lockbox-keys' to migrate the 'client.osd-lockbox' key of an encrypted OSD. That key lives in the authentication database and in an LVM tag on the OSD's block device that ceph-volume rebuilds the keyring from, so rotating only the entry left the OSD unable to unlock, and recreating it…

otherlist the options that are still open when a run finishes, so that ending the migration does not mean looking up which key groups are left

otherrecover the admin keyring through the 'mon.' credential when a run was interrupted while rotating 'client.admin', which left the cluster without a usable admin key before

othercommit rather than drop a pending key when a live key swap was interrupted after the key reached the bluestore label, as the OSD data directory is rebuilt from that label at boot

otherplan a newer interrupted rotation of an entity even if an older run finished one, for example after a key reset by hand or a reused OSD id

otherrequire every monitor in quorum only for a monitor key rotation, so a cluster with one monitor down can still migrate its daemon keys

otherreport daemons and nodes whose Ceph version or kernel could not be verified apart from those known to be outdated

otherrestore 'auth_preferred_cipher' also when a run fails, and refuse to continue over an unknown recorded value instead of dropping it

otherhold a second apply run on any node back through a lock on the cluster file system, and take the node's bulk restart lock as well, so that a rolling restart from the web interface cannot start there meanwhile

otherrecord which OSDs a run sets 'noout' on before setting it, so that a hard kill in between cannot leave the flag without a record to clean up from

featurerotate the standby managers before the active one, so that a failover lands on a manager that already carries the new key

otherreport whether an authentication check is still an error from what the run itself confirmed, as the monitors recompute on their own tick

othercut the output of a run down to what decides whether to proceed

9.2.12 Aug 22, 2026

fixfix #7136: ui: tree: harmonize folder view resource ordering

fixfix #6113: ui: import: allow selecting a resource pool when importing a guest from an OVA file or from VMware ESXi

otherceph: rolling restart:

featureallow a restart on a cluster whose only errors are the cephx cipher health checks that Ceph 19.2.6 and 20.2.4 raise. Those made every upgraded cluster report HEALTH_ERR, which blocked every rolling restart, so one could not be finished and left daemons on mixed versions

otherjudge each health check on its own severity instead of on the overall cluster status

otherignore health checks that Ceph itself has muted

otherevaluate the OSD map flags only for an OSD restart, as they do not affect monitor quorum, manager failover or MDS takeover. A 'nodown' set to stop OSDs from flapping no longer blocks a monitor restart

otherreport per daemon type whether a check blocks a restart, so the web interface only warns about what applies to the restart at hand

otheronly clear the 'noout' flags the restart set itself. A flag an operator had set on a single OSD, to stop it flapping or while working on its disk, was cleared as soon as any rolling restart finished

featureceph: allow muting and unmuting a health check from the web interface and the API. A muted check is still evaluated and reported, but it no longer counts towards the overall cluster status. That is the only answer for a check that cannot be acted on, and it was previously only possible on the…

featureceph: add 'pveceph auth status', a read-only report on which cephx keys still use the old cipher, whether they can be migrated yet, and what is holding that up, including the kernel version of every node.

fixceph: add a guided helper to migrate the cephx service keys to the aes256k cipher: /usr/share/pve-manager/migrations/pve-cephx-rotate-service-keys It goes through the daemons of the whole cluster one at a time and can be narrowed to a single daemon type or a single daemon. It runs as a dry run…

otherpve8to9: name the cephx key migration health checks instead of asking to resolve them, as an upgraded cluster reports its unmigrated keys as insecure and the client keys cannot be migrated at all on a Bookworm kernel.

fixfix #7927: ui: sdn prefix-lists: change the prefix format to allow bigger subnets, covering the full CIDR prefix range including 0.0.0.0/0.

9.2.11 Aug 14, 2026

otherui: certificates, lxc DNS, VM cloud-init and PCI: encode rendered values with htmlEncode.

featureui: acme: use improved URL rendering implementation from proxmox-widget-toolkit.

9.2.10 Aug 7, 2026

otherpveperf: make bogomips regular expression case insensitive, other architectures like Loong64 use different capitalization

otherui: LXC templates: hide foreign architectures by default, arm64 and amd64 look very similar and can be easily confused

otherui: appliance templates: rename the "Package" column to "Name"

featureui: LXC templates: add a search hint to the "download" dialogue and widen the search input field

breakingapi: ceph: mds: deprecate hotstandby parameter in the API schema, and do not set the mds_standby_for_name and mds_standby_replay config options any more, they were removed in Ceph 14.1 and setting them has no effect any more

9.2.9 Aug 3, 2026

breakingui: qemu: default aarch64 VMs to a KVM-usable CPU model instead of one that QEMU rejects at start, and warn when an incompatible ARM CPU model is selected.

9.2.7 Aug 2, 2026

featureceph: when installing, offer only the Ceph releases that have packages for the node's architecture, from a new per-node API endpoint instead of a hardcoded list, so an arm64 node no longer lists releases without an arm64 build.

othersubscription: bind keys to a CPU architecture; arm64 keys carry an explicit marker, and a key that does not match the node's architecture is rejected in the API and CLI and flagged early in the web interface.

othercontainers: show the appliance template architecture in "pveam available" and the template selector, and point out when it differs from the node it would run on.

fixfix #7187: add the ethtool output for physical network interfaces to the system report, to help debug link and offloading issues.

featureadd tooltips describing the acceleration modes to the VM CPU flag selector.

otherpvesh: support API paths whose parameters are described through composed 'allOf' or 'oneOf' schemas, which the HA rules endpoints use as of libpve-common-perl 9.1.21, so that their options keep being accepted.

9.2.6 Jul 31, 2026

otherfabrics: wireguard: node edit: use network selector for internal nodes, making the semantics of the field more obvious, and entering values less error-prone and manual.

otherapi: apt: versions: track proxmox-enterprise-support-keyring version

featureui: ha: node affinity: refactor and extend UI, allow configuring "positive" or "negative" affinity rules. negative affinity allows declaring nodes on which HA resources must not (strict rule) or should not (non-strict) run on.

featureui: ha: resource affinity: add hint for affinity type config value, mapping "positive" to "Keep Together", and "negative" to "Keep Separate", like the create/edit dialogue already did before.

otherui: ceph: pool: set target ratio to 0 when the value is not set, to explicitly clear the value instead of not sending the value to the backend and keeping the previous value set.

9.2.5 Jul 15, 2026

featureceph: add guided rolling-restart for Ceph daemons, available both from the API and the web interface, so operators can safely cycle all OSDs, monitors, managers or metadata servers of a cluster after a configuration or kernel change without hand-rolled scripts. Each step waits for the previous…

fixceph: osd: drop two obsolete cleanup workarounds now handled elsewhere: Ceph itself runs 'pvremove' while zapping an OSD, so our own call could fail on an already-removed physical volume, and the udev trigger worked around a systemd bug fixed long ago.

otherceph: skip re-broadcasting the Ceph service status to the cluster file system on every pvestatd cycle when nothing changed, avoiding needless pmxcfs writes.

fixfix #6948: ui: ceph: configuration database: automatically show the MASK column once any entry uses a mask, so masked settings such as 'osd/class:hdd' are no longer indistinguishable from cluster-wide ones.

fixui: sdn: fabrics: fix adding and editing BGP unnumbered interfaces, which carry no per-interface IP address. The IPv4 column is now optional and stale 'ip'/'ip6' properties are no longer submitted, which previously made the backend reject the interface as not defined in the schema.

otherapi: sdn: avoid a double slash in delete request URIs, which a strict firewall or proxy could reject even though the server normalizes it.

fixfix #7460: ui: sdn: point the BGP and IS-IS controller help buttons to their own documentation sections instead of the EVPN one.

otherui: VM boot order: hint that OVMF (UEFI) guests need a virtual RNG device for PXE network boot to work.

otherui: VM vCPU: drop the artificial upper limit on the socket count in the edit dialog, matching the backend which imposes none.

featurepostinst: add kernel NBD devices to the global LVM filter on new installations, to avoid clashes with volume groups on NBD-mapped external disks, for example nested Proxmox VE systems or disks accessed by external backup providers.

otherupdate shipped appliance info index.

9.2.4 Jun 29, 2026

fixfix #4130: external metric server: keep node status updates flowing when a TCP metric server is unreachable. A failed connection previously raised an unhandled exception that aborted the whole node status update, so storage and guest status indicators in the UI eventually turned gray.

fixfix #6348: ui: bulk action: render the resource tags in the selection list using the configured tag style instead of plain text.

featureui: node: show the system log in a structured journal view that colors entries by syslog priority and adds server-side filters for the minimum priority, a systemd unit, a syslog identifier and kernel-only messages, with autocompletion for the unit and identifier filters.

otherui: node: open a service's log in that structured journal view, scoped to the service's systemd unit, instead of as plain text.

otherui: VM CPU flag selector: replace the per-flag radio group and the separate read-only state column with a single Off/Default/On segmented button that both shows and sets the state, and re-enable column sorting.

otherui: custom CPU model: validate the name in the creation dialog against the allowed config-ID format, rejecting invalid names in the frontend instead of only after the backend refuses them.

fixui: sdn: fabrics: fix editing a node interface that already has an IPv6 address, which did not show up and failed to submit because the field was named 'ipv6' instead of the 'ip6' the schema expects, and label the interface address column 'IPv4' instead of the ambiguous 'IP'.

fixui: fix the QEMU version comparison behind the dynamic USB port limit, which wrongly required the minor version to also be greater or equal even when the major version was already newer, so the higher USB port count for capable machine and OS types was not offered.

otherui: stop displaying a misleading 0% disk usage for VMs in the resource views; the field is left empty again, as VM disk usage is not currently queried from the guest agent.

9.2.3 May 24, 2026

featureui: storage content: show the owning guest of a volume and add an action to jump to it.

otherapi schema: cluster options: declare the actual return schema type.

9.2.2 May 21, 2026

featuresdn: fabrics: wireguard: drop the separate endpoint-port field added to the node-edit window in 9.1.19. The underlying schema change in proxmox-ve-config has been reverted: the endpoint now stores only the host, and the connect port is derived from the referenced interface's listen_port at…

featuresdn: fabrics: tighten the fabric and node configuration forms: require at least one prefix, hide node address fields for prefix families that are not configured on the fabric, and disable prefix editing once nodes have been added (since changing the prefix would invalidate existing nodes).

otherui: VM CPU flag selector: disable column sorting as a stop-gap, since sorting and then editing a flag could leave the radio-button widgets in moved rows showing the wrong selected state.

9.2 May 21, 2026 Release notes ↗

featureLatest 7.0 Kernel as new stable default

featureDynamic Load Balancing with the Cluster Resource Scheduler (CRS). In dynamic scheduling mode, the CRS uses real-time node and guest resource utilization metrics to balance HA-managed guests. The new load balancer can automatically migrate HA-managed guests to lower the overall node imbalance…

featureNumerous improvements to the Software Defined Networking (SDN) stack: Add WireGuard and BGP as new fabric protocols. Add support for route maps and prefix lists for fine-grained BGP/EVPN route filtering. Further additions include route redistribution for OSPF fabrics, additional options for…

featureManagement of custom CPU models from the web interface. A new section in the Datacenter → Guest Resources/Hardware allows creating, editing, and removing custom CPU models from the web interface. Custom CPU models allow tailoring the virtual CPU exposed to VMs to a specific set of features. The VM…

featureDisarm and arm HA for safer cluster maintenance. The HA stack can now be disarmed cluster-wide via the new disarm-ha and arm-ha CRM commands. This allows for planned, cluster-wide maintenance work, such as changes in the cluster network, without triggering any node fencing events. The HA resource…

featureKernel 7.0 as new stable default.

featureCeph Tentacle 20.2.1 is available as stable option.

featureExpose the parallel worker count for all bulk actions, not only for bulk migrations. An empty value falls back to the new auto default, which preserves backwards-compatibility with older nodes in a mixed-version cluster.

featureMake several improvements to the task viewer:

featureAdd a Download button to download a task log directly without opening the full task viewer popup (issue 7087).

featureDerive the task end-time from the polled task status if the caller did not provide it, ensuring finished tasks show the correct duration.

featureMake various improvements to the login flow:

featurePreserve deep-link fragments (e.g. /#vNNN) across an OpenID Connect login to make users land on the requested resource (issue 7337).

featurePrevent the realm selection from being changed on the login page as a side-effect of unrelated user creation (issue 7149).

featureReset the UI state on automatic logout to protect users who share a workstation.

featureAllow creating snapshots and backups directly from the resource tree context menu (issue 6209).

featureImprove the rendering of nested pools in the resource view by grouping the child pools under their parent pool.

featureAdd an architecture column to the resource store, enabling other views to display the architecture of a node.

featureFix the OSD toolbar overflowing on narrow viewports.

featureFix the CephFS page not being scrollable when multiple MDS are configured (issue 6234).

featureFix sorting of the Two-Factor Authentication (TFA) column in the datacenter, permission, and user grids (issue 7191).

featureFix the network section being unavailable in the folder view (issue 7125).

featureImprove the "Confirm Remove" dialog layout to properly accommodate larger fields and components.

featureAllow creating network bonds without specifying the bond-primary option to match the backend, which treats the value as optional (issue 4911).

featureUse the correct IANA timezone name Europe/Kyiv in the timezone selector (issue 7141).

featureSmaller fixes and improvements:

featureFix parsing of property strings whose values contain an equals sign.

featureTrim trailing whitespace from custom filenames when downloading ISOs, so the file extension is recognized correctly.

featureInclude Linux Kernel 7.x in the version range for the VM OS selector.

featureFix a typo in a translated OVMF-related error message.

securityFix a boot issue for Windows guests with Virtualization-based Security (VBS) enabled by disabling the cet-ibt and cet-ss CPU flags.

deprecatedSwitch from the deprecated block-job-complete to the newer job-complete QMP command.

breakingRemove redundant checks for USB hotplug support and unplug events during unrelated VM configuration changes.

deprecatedDeprecate and warn about raw cgroup v1 entries in the container configuration. The support for cgroup v1 will be removed in a future release.

securityPrevent local "copy.fail" privilege escalation exploit via AF_ALG sockets within containers by using seccomp filtering (PSA-2026-00018-1). If AF_ALG support is required in a specific container, see the security advisory forum post for more details.

deprecatedSwitch from the deprecated /etc/timezone to the recommended timedatectl to initialize the containers timezone setting (issue 7175).

deprecatedDeprecate the legacy starttime and dow parameters of the backup job API in favor of schedule. The legacy parameters were superseded by schedule since Proxmox VE 7.1 and have now been removed from the API response.

breakingWindows VMs using machine versions 11.0 or 11.0+pve1 are potentially affected by this issue. Such guests may have been created with the packages available in the Proxmox VE 9.2 ISO or qemu-server older than 9.2.0. Upgrading the qemu-server package and setting the machine version to 11.0+pve2 or…

breakingWindows VMs using machine version 11.0+pve2 or newer are not affected by this issue. Under qemu-server 9.2.0 or later, new Windows VMs are created with an unaffected machine version.

breakingWindows VMs using machine versions older than 11.0 are not affected if using qemu-server 9.2.0 or newer.

+143 more items in the release notes

9.1.19 May 20, 2026

otherui: sdn: fabrics: wireguard: present the endpoint port as a separate field in the node edit window, defaulting to the standard WireGuard port 51820, rather than expecting a host:port value in a single endpoint field.

fixui: sdn: fabrics: fix an error when adding a route redistribution rule.

9.1.18 May 19, 2026

otherui: VM CPU flag editor: present the active acceleration as a 'Showing flags for KVM/TCG' label in the flag grid's bottom toolbar, replacing the permanently-visible hint that previously sat below the grid. Also fix scrolling glitches that could leave rows partially rendered, and make the CPU flags…

othercustom CPU models: reject create and edit requests that omit the base reported model, which is structurally required.

otherui: ceph osd: show the dm-crypt encryption status in the OSD details modal; the underlying OSD details endpoint now reports it too.

fixapi: ceph fs: expose the CLI handler for destroying a CephFS also a REST endpoint. Currently this still not exposed in the web UI. Also return all data pools and pool IDs in the filesystem listing, and fix a parameter name on the early add-storage check during create.

fixapi: ceph: broad return-schema correctness pass across the OSD, pool, monitor, manager, MDS, configuration, and node indexes: emit real JSON booleans for flags previously rendered as strings, declare missing return fields with property descriptions, drop a dead duplicated permissions key, omit the…

otherui: sdn: vnet edit: mark the tag field as required for zones that need it, disable rather than hide fields that do not apply for the chosen zone type, and explicitly delete fields that are no longer applicable upon submission.

fixui: sdn: route map and prefix list edit: fix alignment of value cells in the add/edit dialog, use a more consistent style for the match/set grid, make ID and order required, and add online help links.

fixsdn: fabrics: fix populating the WireGuard node 'Allowed IPs' field from existing config.

fixui: lxc create wizard: fix recent regression with the default rootfs disk being missing on fresh wizard opens.

otherui: wizard: increase wizard dimensions from 720x540 to 760x570 to give denser panels like the CPU flag list editor more room while keeping the 4:3 ratio.

otherui: datacenter menu: drop the 'guest resource' grouping and clean up the item list.

featureui: ceph wizard: drop the preview marker for Ceph Tentacle, it's the new stable default.

otherpve8to9: avoid logging a failure when the old kernel metapackages are no longer installed.

9.1.17 May 18, 2026

othernetwork-interface-pinning: write '.link' files with the product-neutral '50-pmx-' prefix and remove legacy '50-pve-' siblings on write, so they no longer collide with installer-written entries.

9.1.16 May 18, 2026

fixfix #6819: storage content view: handle the new 'approximate-size' field returned for inactive qcow2 LVs on LVM by rendering them with a leading '~' marker in the Size column, falling back to 'Unknown' when neither exact nor approximate size is set. Size column sorting remains numeric.

fixpve8to9: accept Proxmox kernels 7.0 and 6.17 as suitable in the upgraded-host checks, matching the default kernel switch in PVE 9.1 (6.17) and the upcoming switch to 7.0. Also fix the X.Y-pve fallback comparison that wrongly rejected 7.0-pve, and reduce noise from per-candidate not-installed probes.

featureui: sdn: improve UX for the wireguard interface dialogs: skip the delete-confirmation prompt for not-yet-saved entries, avoid a brief flicker when opening dialogs, and improve the empty state of the node-edit dialog when no interfaces have been added yet.

featureui: sdn fabric: add onlineHelp links to the node-edit dialogs.

featureui: sdn: route map panel: add 'tag' as a match statement, accepting integer tag values from 0 (matching untagged routes) up to 2^32-1, in line with FRR's 'match tag' clause.

otherd/control: depend on proxmox-enterprise-support-keyring to ensure the Proxmox support keyrings are available (in deactivated state) on PVE installations.

9.1.15 May 18, 2026

featureui: cpu models: add a new Datacenter > Custom CPU Models panel for cluster-wide CRUD of custom CPU model definitions: base model, vendor, physical address bits, hide-hypervisor, Hyper-V vendor ID, and per-flag toggles. Access is gated by Mapping.{Audit,Use,Modify} on /mapping/cpu/; assigning a…

featureui: cpu flags: add a flag editor grid used by both the new custom CPU model dialog (full view, with free-text search over name and description, an accel kvm/tcg selector, and a per-node multi-select filter) and the VM Processor edit dialog (restricted to the flags that may be set per VM). Flags…

featureui: vm processor edit: list custom CPU models alongside built-ins in the type selector, allow filtering out PVE-internal abstract profiles (x86-64-v2/v3/v4/v2-AES), and align the custom-CPU permission warning with the new Mapping ACL.

otherapi: capabilities: advertise the qemu/cpu-flags subroute in the qemu capabilities index so pvesh and other tree-walkers see it.

featureui: sdn: add support for the new BGP fabric protocol, configuring eBGP unnumbered peering with per-node ASN, optional BFD, prefix-list route filters, route maps, and redistribution. The interface panel omits the IP column since unnumbered interfaces carry no IPs.

otherui: ha: crs: auto-load the auto-rebalance settings dialog when opened from the HA status panel; previously it opened with blank fields and a Save would have overwritten the live config. Also display the hold- duration default via defaultText to match the other fields.

fixfix #7599: ui: vm create wizard: defer the first disk addition until the initial nodename is set, so adding a second CD-ROM drive for Windows virtio drivers correctly switches the disk controller from IDE to SCSI.

fixfix #3936: ui: storage: zfs: validate the blocksize field at form-edit time, enforcing a power-of-two between 512 bytes and 16 MiB with an optional 'k' or 'm' suffix.

9.1.14 May 16, 2026

fixfix #5076: ui: dc: add an optional 'audiences' field for OpenID realms, allowing the additional OIDC audiences a token may carry to be accepted.

othersdn: wireguard: stop disabling the name field when creating an external node, which had blocked external WireGuard node creation entirely.

othernetwork: drop the apply flag when generating the WireGuard config, avoiding an error when applying a configuration with newly created interfaces.

fixsdn: wireguard: fix rendering the peer list in Chromium-based browsers, which previously only worked in Firefox due to a race between setting available and selected peers.

featureui: ha: configure the CRS auto-rebalance imbalance threshold and minimum improvement margin in percent (0-100) to match the percent representation already used in the HA panel status. NOTE: previously configured fractional values must be multiplied by 100 to keep the same behavior; this only…

featureui: ha: add a CRS Settings shortcut button to the HA panel toolbar that opens the existing scheduling settings dialog directly, to improve discoverability without duplicating the settings tree.

9.1.13 May 15, 2026

otherapi: hardware: pci: use NVML for querying mediated device information on NVIDIA GPUs, exposing details that the standard sysfs mdev interface does not surface.

featurenode config: add an optional 'location' property holding a name and a latitude/longitude pair, settable per node. Lets management systems like Proxmox Datacenter Manager query and display a host's geographic position, for example on a world map, with per-node overrides on top of the cluster-wide…

featureui: expose the new 'Location' option in both the datacenter and node option views, using the location edit widget and renderer from the widget toolkit.

featureui: ha: resources: add an 'Auto-Rebalance' per-resource flag (default on) that controls whether an HA resource may be migrated during automatic rebalancing, with a matching grid column and status entry.

fixfix ui: sdn: evpn and bgp controller: do not send empty 'route-map-in' or 'route-map-out' values on create, which previously made creating a BGP or EVPN controller without any route map fail.

otherceph: switch the default release for fresh installs from Squid (19.2) to Tentacle (20.2) and drop its experimental gating. Existing clusters are unaffected, as the install wizard's cluster-version probe overrides the default with whatever release the cluster already runs; only the pre-selection on…

othersubscription: adapt to multiple server ID candidates: reuse an existing recorded server ID if it still matches one of the candidates, otherwise fall back to the first candidate. Keeps subscription handling working on hosts where the server ID identification can produce more than one value.

featuretighten qemu-server to >= 9.1.11 for the improved mdev support, libpve-rs-perl to >= 0.14.0 for the new subscription server-ID handling, proxmox-widget-toolkit to >= 5.2.1 for the location edit widget and renderer, and libpve-network-perl and libpve-network-api-perl to >= 1.5.1.

9.1.12 May 15, 2026

breakingui: sdn: fabrics: add management UI for the new WireGuard fabric protocol. New panels under Datacenter > SDN > Fabrics let users create and edit WireGuard interfaces with their peer references on internal nodes, manage external peer definitions, and review per-node available peers. Public keys,…

featureui: sdn: fabrics: ospf: add a per-interface network-type selector (Broadcast, NonBroadcast, PointToPoint, PointToMultipoint), exposing the new fabric API field. Previously the network type was inferred implicitly from whether the interface had an IP, leaving users no way to override it.

featureui: sdn: fabrics: ospf: add a redistribution grid for importing routes from other protocols (connected, kernel, static, ...) into OSPF, with a route-map selector per source.

featureui: sdn: evpn: zone and controller: expose new advanced fields (peer-group-name, nodes, BGP mode, eBGP multihop on the controller; additional controllers on the zone) to the UI.

otherui: always load SDN navigation entries. Previously they were hidden behind a tech-preview gate that rejected the dynamic feature probe when any optional SDN module was not yet available on the cluster, which has not been the intended behaviour for a while now.

fixui: fix parsing of property-strings when values contain an equals sign. The previous logic relied on String.split's limit parameter, which silently truncated values rather than stopping the split, so base64-padded values and similar got cut off at the first =.

othernetwork: sdn: trigger WireGuard config generation on apply, which emits per-interface configuration into /etc/wireguard/proxmox and syncs running interfaces via wg(8) syncconf if wireguard-tools is installed.

featureui: lxc: mountpoint edit: expose the new idmap option for mapping user/group IDs on a per-mountpoint basis, and drop a duplicate mp assignment in the same panel.

featureui: ha: add a button on a HA-managed guest's resource grid to disarm/re-arm it without removing the HA configuration, useful for temporarily skipping HA management during maintenance.

otherui: migrate: display the precondition messages for HA node-affinity rules when they constrain the migration target, so users see why a specific node cannot be picked.

otherui: sdn: title-case existing button and field labels for consistency with the rest of the UI.

featuretighten libpve-network-perl and libpve-network-api-perl dependencies to 1.5.0 and pve-container to 6.1.6 for the new WireGuard fabric, the OSPF redistribute and network-type API surface, and the LXC idmap option.

9.1.11 May 12, 2026

featureui: sdn: introduce management UI for the new prefix list and route map configuration entities. Adds dedicated panels under Datacenter > SDN for creating, editing, and removing prefix lists and route map entries, with explicit sequence numbers for prefix list entries and full match/set/exit-action…

featureui: qemu: wizard: re-add media=cdrom for the optional second VirtIO drivers ISO. The recent OS-type panel split lost the onGetValues hook that appended this on creation, which made adding the secondary ISO fail for Windows guests.

featureui: add default pgettext() and npgettext() implementations to the index template, avoiding UI breakage when no language file has been loaded yet. These functions are required for the context-aware translations support recently added to the proxmox-i18n tooling.

9.1.9 Apr 21, 2026

otherui: ha: status: handle the 'fencing' entry when ordering the grid, so it no longer bounces around between API requests on some browsers. Place it directly after 'quorum' for quick visibility.

fixapi: apt package versions: fix typo in libpve-notify-perl package name, which caused the package to be missing from the versions list.

fixfix #6234: ui: ceph: make the CephFS page scrollable along the Y-axis, so entries stay reachable on clusters with multiple MDS.

otherapi: vnc/termproxy: bind VNC and SPICE tickets to the listen port to harden authentication for interactive console sessions.

otherapi: vncproxy: always use a freshly generated password when authenticating via the VNC protocol, improving entropy compared to the previous ticket-derived scheme.

otherapi: termproxy: pin the accepted ticket in the spawned termproxy process as an additional defense-in-depth measure.

featuresdn: add a dry-run diff view to the SDN apply action, showing the upcoming FRR and ifupdown2 configuration changes before the user commits them.

otherupdate shipped appliance info index.

9.1.8 Apr 2, 2026

featureui: datacenter options: add dynamic load scheduler and auto rebalancing configuration for HA cluster resource scheduling, including threshold, hold duration, margin, and method settings.

deprecatedapi: backup: deprecate the legacy 'starttime' and 'dow' parameters in favor of 'schedule' and drop them from the API response, as they have been superseded since PVE 7.1.

featureapi: backup: add return schema for backup job endpoints.

othersystem report: adapt to ZFS 2.4.0 renaming arcstat to zarcstat.

9.1.7 Mar 27, 2026

otherui: qga: rename freeze-fs-on-backup checkbox to freeze-fs, reflecting that filesystem freeze/thaw now also applies to snapshots and replication, not just backups.

otherui: qemu: hardware: efi: suggest enrolling UEFI 2023 certificates from Microsoft when pre-enrolled keys are present but the 2023 certs are missing, as the 2011 certificates expire mid-2026.

deprecatedfix #7175: replace deprecated /etc/timezone handling with systemd timedatectl.

fixfix #7337: ui: preserve deep link hash on OpenID login redirect, so users are directed to the intended page after authentication.

fixceph: osd: fix bootstrap keyring creation when auth_client_required is not set in ceph.conf, defaulting to 'cephx' to match Ceph's own default.

fixfix #7011: ceph monitor: set ownership of monitor logs to ceph:ceph after creation, so logging works on freshly set up clusters without waiting for a ceph-common upgrade.

fixfix #7386: ui: vm memory: fix compatibility with Firefox ESR 115 by avoiding ES2025 Iterator.toArray, as we target ES2024 for the Trixie based releases.

fixfix #7191: ui: correctly sort TFA column in the PVE user list.

featureapi: cluster resources: add missing 'shared'-storage flag to return schema, required by the proxmox-datacenter backend.

otherui: download iso: trim filename to correctly detect file extension when a custom filename has trailing spaces.

fixui: ceph: fix pool edit dialog sometimes showing incorrect size and min_size values due to a race condition, which could lead to unintended replication setting changes on save.

fixui: ceph: osd: fix toolbar overflow on small screens by enabling horizontal scrolling.

fixfix #7300: ui: acl: include pre-generated SDN zones and fabrics in the permission path selector.

9.1.6 Feb 12, 2026

featureui: lxc/MPEdit: add "keepattrs" flag

9.1.5 Jan 27, 2026

otherui: display: update 'live-migration with VNC-clipboard not working' note.

otherpveceph setup: warn if experimental release is selected with (default) enterprise repo.

otherpveceph setup: prompt switch from enterprise to test repo for experimental release.

featureceph: add Ceph 20.2 Tentacle as available (preview) release.

fixfix #7149: ui: user create: do not leak changing the realm for a new user into the pre-selected realm of the currently logged in user, as that might cause some UX friction and confusion on their next login.

otherui: fully reset UI state on automatic logout due to stale ticket (e.g., after resuming a computer from longer suspend), as just showing the login mask on top of the current state might be a bit confusing.

fixui: utils: fix OVMF typo in error message translation.

otherupdate shipped appliance info index to current CDN state.

fixfix #7229: bulk actions: refresh pmxcfs infos between processing each guest to ensure any changes in-between, like from a hook script, are visible for successive starts.

otherhttp server: unify error message in case of authentication failure due to wrong credentials.

otherui: resource tree: don't show empty grouping nodes as expandable.

otherui: resource tree: show nested pools as actual child nodes of their parent pool and in turn drop rendering their parent path prefix.

9.1.4 Dec 22, 2025

otherapi: apt changelog: check for odd package name and ensure arguments are separated from options.

9.1.3 Dec 12, 2025

fixui: ceph install wizard: fix typo.

featureclose #6209: ui: allow creating snapshots and backups from the context menu.

featureui: improve some translatable strings and add some context for translators.

otherui: bulk actions: don't try to reset non-existing 'vmidfilter', which would cause an error in the browser console.

otherd/postinst: drop now obsolete apt-auth.conf migration. It was required after upgrading from Proxmox VE 7 to 8. A direct upgrade from Proxmox VE 7 to 9 is not possible, so it's obsolete.

fixfix #7125: ui: fix loading network section in folder view. Navigating to the 'Network' section would fail with a browser error, because of a missing reference to the documentation.

otherpve-sdn-commit: run for vlan/qinq zones on non-vlan-aware bridges. When using non-vlan-aware bridges for the VLAN or QinQ zones, it is necessary to regenerate the SDN configuration when the name of the physical NIC might have changed. In particular, this fixes issues in combination with pinning…

deprecatedapi: workaround broken 'maxworkers' alias in bulk actions api calls. For the new, cluster-wide bulk actions, only the 'max-workers' spelling would have an effect. For the pre-existing node-specific bulk migration, an error would occur when specifying the deprecated 'maxworkers' spelling, causing…

otherui: storage oci pull: optimize regular expression for the reference to avoid catastrophic backtracking potentially causing hangs in the dialog window.

9.1.2 Nov 29, 2025

otherpve8to9: improve message for TLS checks in relation to different key bit size for RSA or ECC based keys.

breakingfix #2077: pvenode: drop dependency on GNU readline Perl module in favor of our own PTY module. While it's less flexible, it's much simpler and robust, and–more importantly–it has no issues with being instantiated more than once, which recently became an error in the readline module, breaking EAB…

otherapi: bulk actions: use kebab-case for 'max-workers' parameter with alias to old 'maxworkers' spelling for backwards compatibility.

otherapi: cluster bulk actions: fall-back to datacenter.cfg for max-workers.

otherapi: cluster bulk actions: increase default worker from 1 to 4 for start, stop & suspend actions.

otherapi: cluster bulk actions: define minimum of 1 and a maximum of 64 for max-workers parameter.

featureapi: node bulk action: add max-worker parameter to stop and suspend actions to allow overriding through API.

otherapi: node bulk action: improve the cpu-thread-count derived max-worker fallback, which is used when neither an API parameter nor an max_worker setting in the datacenter config is set. Ensure that there is always one core left over for the system and use maximum of 8 workers.

featureapi: node bulk start: implement concurrent workers and add max-worker API parameter.

otherapi: node bulk migrate: set maximum of max-worker parameter to 64.

otherui: bulk action window: give box-label hint for force-stop checkbox more space.

featureui: bulk action window: add max-workers field to all actions.

otherui: bulk action window: adapt to lowered upper-limit for migrate max-worker.

otherpveupdate: do not try to update subscription when using offline key.

9.1.1 Nov 18, 2025

featureui: storage: oci registry pull: make parsing the reference of a OCI image URL more robust and add a validator to the reference field for better immediate feedback to the user.

otherui: storage oci pull: reword empty text for tag field to avoid suggesting that this placeholder is the default value, as we currently do not have any here.

9.1 Nov 19, 2025 Release notes ↗

featureLatest 6.17.2-1 Kernel as new stable default

featureCreate LXC containers from OCI images. Open Container Initiative (OCI) images are a popular format for distributing templates for system or application containers. OCI images can now be uploaded manually or downloaded from image registries, and then be used as templates for LXC containers. This…

featureSupport for TPM state in qcow2 format. Some VM guest workloads require attaching a virtual Trusted Platform Module (TPM), for example newer Windows guests. The state of a virtual TPM can now be stored in the qcow2 format. This allows taking snapshots of VMs with a TPM state on file-level storages…

featureFine-grained control of nested virtualization for VM guests. Some VM guest workloads need access to the host CPU's virtualization extensions for nested virtualization. Examples are nested hypervisors or Windows guests with Virtualization-based Security enabled. A new vCPU flag allows to enable…

featureMore detailed status reporting for the Software-Defined Networking (SDN) stack in the GUI. Local bridges and VNets report the currently connected guests. EVPN zones additionally report the learned IPs and MAC addresses. Fabrics are now part of the resource tree and report routes, neighbors, and…

featureKernel 6.17 as new stable default.

featureSeamless upgrade from Proxmox VE 8.4, see Upgrade from 8 to 9.

featureAllow to initiate bulk actions directly from the Tag View. The Tag View provides a convenient overview over virtual guests, grouped according to their assigned tags. Right-clicking on a tag in the resource tree now allows to conveniently initiate bulk actions for virtual guests with that tag.

featureRight-clicking on a VM in the resource tree now allows to reset the VM (issue 4248).

featureImprovements to the new mobile web interface introduced in Proxmox VE 9.0:

featureSupport login using an OpenID Connect (OIDC) realm.

featureThe VM hardware and option panels now show pending changes.

featureAllow to edit VM options directly from the mobile web interface.

featureImprove detection of mobile Firefox (issue 6657).

featureFix an issue where the consent banner was not rendered as Markdown.

featureMove the global search bar to the middle of the screen and adapt to the screen size for improved visibility.

featureUse icons that are more suitable for high-resolution display (issue 6599).

featureIncrease the thresholds for warning about high memory usage for the cluster, node, and guest summary pages.

featureFix an issue where no login dialog would be shown after a session has expired.

featureFix an issue where resource pool members would not be displayed correctly after adding or removing a member (issue 6385).

featureFix performance issues where the GUI would be slowed down in setups with many guests.

featureThe datacenter, node, and guest summary pages now show two separate selectors for graph timeframe and aggregation type. Previously, both settings were combined into one dropdown box.

featureThe journal viewer now keeps the horizontal scrolling position even when refreshing the journal (issue 6679).

featureFix an issue where APT changelogs or package descriptions with non-ASCII characters would be displayed incorrectly.

featureClarify that the graphs in the storage summary show usage in bytes.

featureFix an issue where the first guest would not update its status in the resource tree for five minutes after creation.

featureAllow filtering for name, node or VMID when adding guests to a resource pool.

featureFix an issue where certain setting dialogs, available only to highly-privileged users by default, were susceptible to XSS (PSA-2025-00013-1).

featureFix an issue where the task description of some task types would be incomplete.

featureFix a regression where the resource tree tags would not have the correct color (issue 6815).

featureAdd some missing links to the online documentation (issue 6443).

featureUpdated translations, among others:

featureCzech

featureFrench

featureGeorgian

securityFine-grained control of nested virtualization for VM guests. Some VM guest workloads need access to the host CPU's virtualization extensions for nested virtualization. Examples are nested hypervisors or Windows guests with Virtualization-based Security enabled. The host CPU type makes all CPU…

breakingRemove notice marking AMD SEV-ES and SEV-SNP as highly experimental.

breakingRemove the computed and obsolete group field from the service status data.

breakingRemove obsolete checks and warnings concerning RRD migration.

deprecatedrrdtool is rebuilt to provide a native systemd unit file. The ListenStream directive was updated to not print a deprecation warning by using /run as directory for the socket.

+150 more items in the release notes

9.0.18 Nov 18, 2025

fixui: resource tree: fix rendering of guest text when sorted by name.

fixui: fix recent regression from wrongly rendering guest entries in the tag view.

featureui: console: add a simple heuristic to detect application containers and show a warning for them in the console view, as the console for such containers is (currently) likely not fully functional.

9.0.17 Nov 17, 2025

featureui: lxc: options: make sure values of recently added properties are html-encoded.

fixui: lxc options: fix rendering default value tty count in edit window.

fixfix: ui: trim leading and trailing white space from OCI registry reference for convenience.

otherui: qemu: stop marking SEV-ES and SEV-SNP options as experimental.

otherui: sdn: improve naming of vm network device column in bridge view.

featureui: qemu tdx: add support for configuring TDX attestation.

fixui: resource tree: fix timing race where rendered clustername in root-node could seemingly vanish.

otherui: lxc: support configuring empty environment variables.

fixnetwork-interface-pinning: fix creating directory when '/usr/local/lib' does not exist.

otherui: create wizard: only submit ha-managed if checked for better compatibility with other nodes that are still running a slightly older package version set.

featureui: storage: oci registry pull: add filename field to allow overriding the default one.

featureui: add worker task type description mappings for cluster-wide bulk actions.

9.0.16 Nov 16, 2025

featureapi: add endpoint to query OCI registries for the tags (versions) of an image.

featureui: template view: add OCI registry pull dialog.

featureui: lxc: add support to edit container runtime environment. The new environment management provides a convenient way to change the containers runtime environment. Some container (OCI) images support basic configuration through the environment.

otherui: lxc network: support advanced host-managed option for containers where the network is setup on start directly by the host, avoiding the need for any network management stack inside the CT.

featureui: lxc options: add support for init command entrypoint. Custom container images or OCI images might want to adapt the initial command that gets executed as entry point on container start. For system containers this is /sbin/init, which quite often points to systemd. Most OCI application images…

featureui: provide a context menu for the datacenter node in the main resource tree providing central access to the new cluster-wide bulk-actions for guests.

featureui: provide a context menu for the tag nodes in the main resource tree if the "Tag View" is selected. This allows one to conveniently execute bulk actions for all guests that have a specific tag.

9.0.15 Nov 15, 2025

otherui: ip view: ensure container is fully initialized before store update.

9.0.14 Nov 15, 2025

fixfix creating worker task log file for new cluster-wide bulk migrations.

otherui: container: show dynamically assigned IPs in network tab.

otherui: reuse IP overview from VMs for container and show it in the CT summary view.

featureui: summary view: increase row height to ensure there's enough space by default for new IP overview. This results in the RRD metrics charts to have 250px height for the actual data.

9.0.13 Nov 14, 2025

featureui: qemu options: add support to configure Intel TDX for confidential computing (similar to AMD SEV).

otherui: ha: do not show legacy HA group info in guest status view, as groups got replaced with the more flexible HA Affinity-Rules in Proxmox VE 9.

otherui: qemu: tpm drive: non-raw image formats are now supported for TPM state drives.

featurerrd metrics: always prefer new-format keys over old-format keys to avoid artificially delaying showing the current status of a VM/CT on a fresh cluster.

featureapi: termproxy, vncwebsocket: allow one to using API tokens, the user still needs a local PAM login to use the shell.

other8to9: drop warnings specific to now outdated RRD migration tool.

featureapi: implement node-independent cluster wide guest bulk actions like start, stop, migrate or suspend.

featureui: add guest bulk actions menu at the right side of the datacenter level top bar.

otherapi: metric export: reuse credentials from request for proxying.

featureui: ha resource removal: allow one to purge resource from all rules.

featureVM and CT create wizard: add checkbox for creating HA resource upon VM creation.

featureui: restore: add checkbox for adding HA resource upon restore of a guest backup.

otherui: ha: rules: make status icon unclickable if there are no errors.

otherui: replace Proxmox logo with slightly larger SVG version for better and crisper scaling on HiDPI displays.

otherui: workspace: move global search bar in the middle and make it flexible to better use available space in the top bar.

9.0.12 Nov 14, 2025

fixfix #6815: ui: resource tree: update tag colors properly.

fixfix #6779: daily update: renew already expired certificates, e.g. for when nodes are offline for a longer period of time.

fixfix #6897: ui: add online help reference for LXC container feature edit window.

otherui: properly reset API 401 count to avoid rare edge case where there is no login mask shown after having been logged out (e.g. expired ticket).

featureapi: apt: add 'all' variant to architecture property.

otherapi: apt: correctly encode fields from available updates as utf8.

fixfix #6443: ui: improve online help for VM State storage.

breakingui: ha: remove default focus from VM/CT dropdown in resource edit window to avoid opening the picker immediately when opening the window.

featureha: do not allow an empty VM/CT dropdown in resource edit window.

fixfix #6932: api: acme: add digest and plugin to return schema.

otherui: VM cpu flag selector: query CPU flag list via API.

otherstatus: rrd metrics: always use pve-node-9.0 data format path and drop RRD metrics format migration on upgrade as we now transparently read from the old file if a time-frame falls under the old file(s).

featureapi: nodes: use new status module for sdn subdirectory.

featurepvestatd: add network resource to status reporting.

featureapi: cluster: add support for network resource type.

featureui: resource tree: add network resource.

otherui: network browser:

featureadd ip-vrf panel for evpn zones.

featureadd mac vrf panel.

featureadd zone bridge view.

featureui: sdn: status view: adapt to new network resource.

9.0.11 Oct 6, 2025

featureclose #4248: ui: Add Reset button to right click context menu of virtual machines, like available in the resource tree or the global search result.

breakingui: guest snapshot: remove excess '}' at the end of window title

fixfix #5244 pveceph: install: add new 'manual' repository option, which, for example, can be useful for offline installation

featureui: ceph install wizard: add option and hint for 'manual' repository for, e.g., offline installation through a Proxmox Offline Mirror managed repository.

fixfix typo in ifupdown2 version error message.

otherupdate shipped appliance info index.

9.0.10 Sep 12, 2025

fixui: datacenter notes: fix visibility of top toolbar to allow editing the notes again.

otherapi: node xterm.js and VNC shells: avoid nested login for already logged in root@pam when tunneling to another node. This should avoid a race where the shell hangs on load that seems to very rarely happen in Proxmox VE 9, but currently the fix only covers the root@pam users. While this makes this…

9.0.9 Sep 10, 2025

otherui: cluster dashboard: use higher warning thresholds for memory gauge and the memory widget-column in the node overview table.

featurecluster: resources: add sdn property to cluster resources return JSON schema.

otherui: resource pool: never submit value of filter field when adding guests to a pool.

9.0.7 Sep 2, 2025

otherpve8to9: rework systemd-boot checks

otherconfigs: drop unused country.dat file from install

fixfix #6599: ui: use font-awesome hdd icon instead of png

otherui: icons: use svg versions where possible

otherui: properly center ceph icon

featureapi: ceph: add missing type to api schema

fixfix #6747: ceph: osd: swap vg and lv arguments when creating an OSD

fixfix #6385: ui: pool: members: fix store reload on add/remove

fixha: rule edit: fix enabling ha rules which are disabled

otherapi: use 'number' instead of 'amount' for countable nouns

9.0.6 Aug 20, 2025

fixfix #6652: ceph: osd: enable autoactivation for OSD LVs on creation

featurepve8to9: only allow systemd-boot when it is actually used before upgrade

fixui: ha: rules: fix edit button

9.0.5 Aug 13, 2025

fixfix #6657: pveproxy: detect mobile firefox better

otherui: storage edit: warn about disabling snapshot-as-volume-chain on LVM

otherui: make sure more datacenter option renderers are html encoded

9.0.4 Aug 8, 2025

other8to9 upgrade checks (pve8to9):

otherskip check for running guests if already upgraded

otheruse check for unified cgroup v2 support via pve-container

otherrework systemd-boot checks

featureadd check for removable GRUB entry

othersupport single-line repo entries with bracket options

otherlvm config: check that --clear-needs-check-flag is set if there is a thin_check_options override

otherd/postinst: lvm config: check that --clear-needs-check-flag is set if there is a thin_check_options override

9.0.3 Aug 5, 2025

featured/postinst: add snippet to manage systemd-tmpfiles configurations to ensure they are updated on package upgrade.

9.0 Aug 5, 2025 Release notes ↗

featureLatest 6.14.8-2 Kernel as new stable default

featureNew major release based on the great Debian Trixie.

featureSeamless upgrade from Proxmox VE 8.4, see Upgrade from 8 to 9.

featureVM snapshots on thick-provisioned LVM storages with snapshots as volume chains (technology preview). A new property on thick-provisioned LVM storages enables support for snapshots as volume chains. With this setting, taking a VM snapshot persists the current virtual disk state under the snapshot's…

featureHigh-Availability (HA) rules for node and resource affinity. HA affinity rules are a new mechanism to control the placement of HA resources, such as HA-enabled VMs and containers, on nodes. Node affinity rules mandate that HA resources should only be placed on particular nodes. Resource affinity…

featureFabrics for the Software-Defined Networking (SDN) stack. Fabrics are routed networks of interconnected peers. The SDN stack now supports creating OpenFabric and OSPF fabrics of Proxmox VE nodes. Fabrics can be used for a full-mesh Ceph cluster or act as an underlay network for Virtual Private…

featureModernized mobile web interface. The mobile interface allows a quick overview over guests, tasks, storages, and other resources. It also allows basic maintenance tasks, such as starting and stopping virtual guests. The overhauled mobile interface is written in Rust and based on the Yew framework…

featureZFS now supports adding new devices to existing RAIDZ pools with minimal downtime.

featureImprovements to the notifications:

featureFix an issue with the SMTP endpoint options where the "Authenticate" check box would be inadvertently checked in some browsers (issue 5588).

featureFix an issue where an SMTP endpoint did not properly quote the sender's display name (issue 6188).

featureMove notification settings of backup jobs to a separate tab.

featureClarify the behavior of notification modes by mapping the notification mode "auto" to a concrete mode in the GUI.

featureRemove support for obsolete notification settings that were only briefly available on pvetest repositories.

featureEnsure that updates to translations are immediately reflected in the GUI.

featureFix a short-lived regression that prevented the file-restore dialog from opening.

featureImprove error reporting when a login fails to improve troubleshooting.

featureImprovements to the custom consent window:

featureFix an issue where the consent window size would exceed the viewport size (issue 6312).

featureAvoid showing the consent text twice for OIDC logins (issue 6311).

featureHTML-encode API results before rendering as additional hardening against XSS (PSA-2025-00008-1).

featureSmall improvements to the services view in the node's system panel.

featureFix an issue where the node services view would incorrectly show postfix as disabled (issue 6537).

featureFix an issue where the Help button would not be displayed when editing a backup job (issue 6534).

featureImproved handling of translations:

featureAdd support for plural forms and ngettext usage.

featureTranslations can now contain comments that are extracted from the source code and provide useful context for translators.

featureUpdated translations, among others:

featureCzech (new!)

featureArabic

featureBulgarian

featureFrench

featureGerman

featureItalian

featureJapanese

featureKorean

securityBackport a fix for an out of bounds read vulnerability in libtpms, a library for integrating TPM functionality into QEMU (PSA-2025-00010-1).

securityContainers are now created as unprivileged containers by default. This was already the default when creating containers via the GUI, and it is now also the default when creating containers via API and CLI. Privileged containers lack security features and should only be used in trusted…

breakingContainer setup does not generate a DSA SSH host key anymore, as OpenSSH removed support for DSA.

breakingDrop support for GlusterFS starting with PVE 9, as it is unmaintained.

+89 more items in the release notes

8.4.21 Sep 26, 2026

8.4.20 Sep 26, 2026

8.4.19 Sep 26, 2026

8.4.18 Sep 26, 2026

8.4.17 Sep 26, 2026

8.4.16 Sep 26, 2026

8.4.15 Sep 26, 2026

8.4.14 Sep 26, 2026

8.4.13 Sep 26, 2026

8.4.12 Sep 26, 2026

8.4.11 Sep 26, 2026

8.4.10 Sep 26, 2026

8.4.9 Sep 26, 2026

8.4.8 Sep 26, 2026

8.4.7 Sep 26, 2026

8.4.6 Sep 26, 2026

8.4.5 Sep 26, 2026

8.4.3 Sep 26, 2026

8.4.2 Sep 26, 2026

8.4.1 Apr 10, 2025

fixui: fix regression with checking if volume is QEMU backup, which could block some dialogues like file-restore.

otherceph versions: do not try to parse empty string and include raw string in error to make this easier to debug.

otherui: backup: hide change mode detection for VMs and non-PBS storage.

8.4 Apr 9, 2025 Release notes ↗

featureLatest 6.8.12-9 Kernel as new stable default

featureLive migration with mediated devices such as NVIDIA vGPU. This allows the migration of running VM guests that use mediated devices. Hardware and driver support is required. Currently, only NVIDIA GPUs are known to support live migration.

featureSupport for external backup providers. Proxmox VE now provides an API that allows developers to write backup provider plugins. A backup provider plugin can implement backup and restore functionality for external backup solutions. This way, external backup solutions can be fully integrated with the…

featureSharing host directories with VM guests using virtiofs. Virtiofs allows sharing directories between the Proxmox VE host and VMs without the overhead of a network filesystem. Modern Linux guests support virtiofs out of the box. Windows guests need to install additional software.

featureLatest Linux 6.14 kernel available as opt-in kernel.

featureCeph Squid 19.2.1 is available as stable option.

featureSeamless upgrade from Proxmox VE 7.4, see Upgrade from 7 to 8.

featureAllow to set a consent banner that users must acknowledge before logging in (issue 5463). This can be required for compliance reasons and is already supported in Proxmox Backup Server. The banner supports Markdown and can be set in Datacenter → Options → Consent Text.

featureSort storage content such as ISO files according to the browser locale and with numeric sorting (issue 6138). This results in a more natural sorting order with respect to capitalization and numbers in filenames.

featureDownloading ISO, CT templates, or OVA appliances from URLs now uses the configured proxy for both HTTP and HTTPS connections (issue 3716).

featureThe migration network in the datacenter options can now be entered with a custom CIDR (issue 6142).

featureTask lists now show an additional action column that opens the task details for better discoverability.

featureConfirmation dialogs now mention the guest name to make it clearer for which guest the action will be applied (issue 3181).

featureBetter align privilege checks for adding PCI, USB, or VirtIO RNG devices in the web UI with the actual privilege checks in the backend.

featureAllow uploading and downloading disk images to storages with content type "Import", in preparation for importing disk images to VMs in the future (issue 2424).

featureFix an issue where clicking on an external link to the GUI would display a login screen, even if the current session was still valid.

featureFix an issue where the PCI mapping editor would preselect the wrong radio button.

featureFix a security issue that allowed XSS via certain QEMU guest agent responses (PSA-2024-00016-1).

featureHTML-encode API results before rendering as additional hardening against XSS (PSA-2025-00002-1).

featureVarious smaller improvements to the GUI.

featureUpdate xterm.js to version 5.5.0.

featureFix an issue where an xterm.js console would not have the correct size on high-latency connections (issue 6223).

featureUpdate noVNC to version 1.6.0.

featureFix some occurrences where strings were not marked as translatable.

featureFix some occurrences where translatable strings were split, which made potentially useful context unavailable for translators.

featureImproved translations, among others:

deprecatedClarify the handling of QEMU machine version deprecations. Starting with QEMU 10.1, machine versions will be removed from upstream QEMU after six years. Proxmox VE will support machine versions from approximately two previous major Proxmox VE releases. This is now documented, and QEMU will warn…

securityFix security issues concerning image formats that would allow sufficiently privileged attackers read or read-write access to arbitrary host files. See PSA-2024-00014-1, PSA-2025-00001-1, PSA-2025-00003-1, PSA-2025-00004-1.

breakingRemove an outdated warning about entropy starvation when using /dev/random as an entropy source.

securityOVA/OVF import: Fix a security issue that would allow a sufficiently privileged attacker to obtain a copy of an arbitrary host file by importing a specifically crafted OVA appliance (PSA-2024-00013-1).

breakingRework and improve the Netbox IPAM plugin to properly synchronize the deletion and updates of addresses and networks (issue 5496). Refactor the code to consistently handle errors reported by Netbox. Delete subnets in Netbox after they are removed in Proxmox VE. Properly return the address after…

securitySkip generating rules in forward chains for security groups bound to an interface, instead of causing an error. Rules in the forward chain operate on multiple interfaces, and binding them to an interface does not make sense.

securitySeveral vulnerabilities in GRUB that could be used to bypass SecureBoot were discovered and fixed (PSA-2025-00005-1) The Documentation for SecureBoot now includes instructions to prevent using vulnerable components for booting via a revocation policy.

breakingManually create the IP Ranges in Netbox:

breakingGo to IPAM → IP Ranges and add the DHCP ranges you have configured for your subnet manually

breakingLet Proxmox VE recreate the IP Ranges:

breakingGo to SDN → VNets

breakingEdit the Subnet and delete all DHCP ranges, then click OK

breakingEdit the Subnet, re-create the DHCP ranges, then click OK

breakingApply the SDN configuration

+116 more items in the release notes

8.3.7 Apr 8, 2025

otherui: directory mapping: use actual words in the title

otherui: virtiofs edit: drop writeback checkbox, this feature is unsafe and behaves in unexpected ways.

otherui: set error mask: ensure that message is html-encoded to avoid glitches.

8.3.6 Apr 7, 2025

fixfix #5175: ui: allow configuring and live-migration of mapped PCI (vGPU) resources.

othermapping: pci: include mdev in config checks.

featureui: qemu: add configuration options for AMD SEV-SNP support.

fixfix #5463: show optional consent-banner before user can login. The banner can be configured in the datacenter options.

fixfix #5936: ui: backup: add CT PBS change detection mode selector for manual container backup dialogue.

fixfix #2413: pvestatd: read ballooning RAM usage target from node config.

fixfix #3716: api: use proxy option for https when querying the metadata for a to be downloaded template or ISO file.

otherui: let non-root users configure VirtIO RNG devices if they have the VM.Config.HWType privilege.

breakingui: remove warning about entropy starvation of /dev/random, it does not apply since kernel 5.6 anymore.

featureui: permissions: add ACL path for hardware RNG.

otherbulk migrate: improve precondition checks to also includes unavailable storages on the target node.

otherui: adapt migration window to precondition api additions.

fixui: fix string used for backup storage content-type for PBS backups.

otherui: lxc create: do not suggest nesting is enabled for privileged CTs, correctly clear the checkbox state when disabling it for that case.

otherui: ceph: use common spelling for metadata servers in title

otherapi subscription: output generic apt-auth stanza for ceph.

fixapi subscription: fix permissions for ceph apt-auth file.

featuresystem report: add WWN column to lsblk output.

fixpve7to8: fix broken pipe warning for dkms status invocation.

otherui: ensure various fields are html-encoded to avoid visual glitches.

fixfix #4411: ui: OpenID Connect realm: add fields for new group-mapping support, where a configured user claim is queried for the list of groups that a users should be set or added to.

featureui: tasks: add icon to better convey that one can open the task log from the list of task entries.

othernotifications: rework and clean-up various templates used to send notifications, including those for apt updates, backups, and replication.

featurenode configuration: add per-node option for memory ballooning target and allow one to edit them through the web UI.

featurebackup: implement backup for external providers with full integration reusing and extending our custom storage plugin architecture.

fixfix #6116: ui: qemu: create wizard: order main ISO CDROM drive before additional added CDROM drives in the boot order.

otheruser: password edit: show hint to clarify that password changes for PAM realm only apply to connected node.

otherui: guest migrate window: make all user-visible strings translatable.

otherui: do not split translatable strings.

otherui: qemu pci edit: select correct radiobutton when editing.

featureui: add human readable description for reloadnetworkall task.

otherclose #3181: ui: display guest name alongside VMID in confirm dialogs of potentially destructive actions.

featureui: storage content: allow upload of guest images for import type.

featureapi: add resource map api endpoints for directories.

featureui: add management for directory mappings in the datacenter view.

featureui: qemu: allow one to add Virtiofs devices to passthrough a directory mapping managed folder to the VM.

8.3.5 Mar 6, 2025

otherupdate shipped appliance info index

fixfix #6138: ui: storage content: use locale for sorting

otherui: sdn ipam: powerDNS, NetBox, phpIPAM: split layout in two columns

featureui: sdn ipam: powerDNS, NetBox, phpIPAM: add fingerprint textfield

featureui: storage pbs: reuse new pmxFingerprintField from widget-toolkit

8.3.4 Feb 18, 2025

fixfix #5699: add support to define a HTTP header from which the real IP of a connection should be parsed from. This can be useful for setups with a reverse proxy in front of the API server. On top of that add support for optionally configuring an allow-list of IP networks that the real source IP…

otherapi: network: improve completeness of return schema.

featureui: qemu: add hint that VMs using the VNC clipboard cannot be live migrated.

fixfix #6142: ui: datacenter options: allow custom CIDRs for migration network to cover cases where the network CIDR is not configured on any network interfaces on the node, like for example in a routed full-mesh configuration.

fixpull metric: fix node 'iowait' metric, return the percentage of time spent on waiting on IO in a certain time frame instead of returning the total amount of time that was spent waiting on IO, similar to how the push based metric servers do.

featured/control: add new pve-nvidia-vgpu-helper package as recommended dependency.

8.3.3 Jan 20, 2025

otherupdate shipped appliance info index

featureadd missing htmlEncode for some UI elements

8.3.2 Dec 16, 2024

featureapi: network: add return schema for interface listing

otherui: ceph pool: indentation clean-up

otherui: ceph: don't set default size/min-size when editing existing pool

featureui: ceph pool: add opt-in column for the configured pool application

otherui: qemu: improve error handling and rendering the QGA provided IP addresses of the guest.

otherapi: node status: complete API return schema

8.3.1 Nov 29, 2024

featureui: sdn firewall: add online help reference

featureui: cluster join info: add clipboard icon to "Copy Information" button

otherexternal metric server: influxdb: always quote tags

fixapi: notification targets: fix permission check for POST/PUT

8.3 Nov 21, 2024 Release notes ↗

featureLatest 6.8.12-4 Kernel as new stable default

featureNew Ceph Squid 19.2.0 available as technology preview

featureNew "Tag View" for a quick and customizable overview of virtual guests. Users can already categorize their virtual guests using custom tags. The new "Tag View" view type for the resource tree shows virtual guests grouped according to their tags. This allows for a quick overview of the categories…

featureTighter integration of the Software-Defined Networking (SDN) stack with the firewall. Proxmox VE SDN now generates IP sets for VNets and virtual guests managed by the PVE IP address management plugin. These IP sets can be referenced in firewall rules, making the rules simpler and easier to…

featureMore streamlined guest import from files in Open Virtualization Format (OVF) and Open Virtualization Appliances (OVA). OVF and OVA files can be directly imported from file-based storages in the GUI. This makes it easier to import virtual appliances and simplifies migration from hypervisors…

featureWebhook target for the notification system. The new webhook notification target allows notification events to trigger HTTP requests. Request headers and body can be customized and can contain notification metadata. This allows users to push notifications to any target that supports webhooks.

featureNew change detection modes for speeding up container backups to Proxmox Backup Server. Metadata and data of backup snapshots are now stored in two separate archives. Optionally, files that have not changed since the previous backup snapshot can be identified using the previous backup snapshot's…

featureCeph Squid 19.2.0 is available as a technology preview.

featureSeamless upgrade from Proxmox VE 7.4, see Upgrade from 7 to 8

featureIntroduce a tag view for the resource tree. Users can already assign tags to virtual guests to categorize them according to custom criteria. The new tag view shows virtual guests grouped according to their assigned tags. This allows users to get a quick and structured overview over the virtual…

featureConfirmation dialogs for guest actions now also display the guest name (issue 5787).

featureAllow unprivileged users to create and manage their API tokens via the GUI (issue 5722). The backend already allowed this, but the functionality was not available in the GUI.

featureUnplugging disks from a running VM is now done asynchronously to avoid running into the HTTP timeout of 30 seconds.

featureIncrease the minimum length requirement for new passwords to 8 characters.

featureNodes in maintenance mode are now displayed with a wrench icon in the resource tree.

featureShow only installed services in the node's system panel by default, but optionally allow to show all services (issue 5611).

featureRight-align numbers in the S.M.A.R.T. values table (issue 5831).

featureUpdate the noVNC guest viewer to upstream version 1.5.0.

featureFix an issue where using the noVNC console would cause the browser to attempt storing a VNC password (issue 5639).

featureFix an issue where notes for nodes and virtual guests did not preserve percent encodings (issue 5486).

featureFix an issue where clicking on an external link to the GUI would display a login screen, even if the current session was still valid.

featureFix an issue with reset behavior when editing a Proxmox Backup Server storage.

featureFix inconsistent reporting of host CPU usage in node selectors.

featureFix an issue where editing the PCI mappings for any but the first node would fail.

featureFix an issue where the Datacenter summary would miscalculate the storage size if a cluster node is offline.

featureFix an issue where the backup job details would misreport the backup mode as snapshot mode instead of suspend mode.

featureFix an issue where the permission check for adding the TPM state was overly strict.

featureFix a regression which broke the mobile UI (issue 5734).

featureFix incorrect online help links (issue 5632).

featureDisable the button for regenerating the cloud-init image if the user lacks the necessary privileges. This better aligns the GUI with the privilege check in the backend.

featureImproved translations, among others:

featureBulgarian (NEW!)

featureFrench

featureGerman

featureRussian

securityThe selector for security groups now shows a tooltip for comments that are too long to fit within the column width (issue 5879).

securityFix a security issue where an authenticated user with necessary privileges can trick the system into accessing arbitrary host block devices, including passing them through into guests as a volume.

securityFix a security issue where authenticated attackers with Sys.Audit or VM.Monitor privileges could download arbitrary host files via the API. See PSA-2024-00009-1 for details.

breakingImprovements to Secure Boot management. With the need to update the revocation database embedded in the shim boot loader, some edge-cases were discovered and improved in the proxmox-secure-boot metapackage. Ship an apt pinning snippet to ensure that Proxmox provided packages are installed, even if…

securityFix a RCE vulnerability in the shim bootloader used for Secure Boot support. See PSA-2024-00007-1 for details.

+173 more items in the release notes

8.2.10 Nov 19, 2024

featureui: firewall: add sdn as valid scope to IP-set selector

featureui: firewall: add forward direction to rule panel

featureui: sdn: add firewall panel

otherui: firewall: show warning when creating forward rules

otherui: import: clarify working storage emptyText

otherchange recommendation of pve-network packages to hard dependency, it's now pulled in by pve-firewall anyway

otherapi: notifications: require powerful privileges for target management

8.2.9 Nov 18, 2024

otherapi/ui: improve mdev listing for PCI mappings. Extend the parameter for the PCI ID to accept both, PCI IDs or named mappings, and for the latter mappings, iterate over all local PCI devices in it and extract the mdev types.

featureui: implement 'Tag View' for the resource tree, which groups guests by their tags. Guests with multiple tags are visible under each of them. Guests without tags and nodes and storages are added to the end of the tree.

otherui: cloudinit: use cloudinit update api when regenerating images.

otherui: cloudinit: avoid suggesting to unprivileged users that they can re-generate the image, disable the button in this case.

fixfix #5787: ui: display guest name in confirmation dialog for actions like start, stop, shut down, or converting to a template.

featureui: lxc: add readonly option for device passthrough.

featureui: lxc: add the "discard" mount option.

otherui: expose the newly supported BZIP2 as available compressor for backups.

fixfix #5722: ui: api token: allow unprivileged users to create their own api tokens, they are self-service after all.

featureapi: add routes for webhook notification endpoints.

otherui: workspace/user view: change password minimum length to 8 to follow recent NIST recommendations.

otherui: pool: dynamic status update every 10s in members screen

fixui: pbs storage: fix reset behavior when editing existing entry

otherapi/ui: include the node ha status in resources call and show as icon

otherui: acme: switch cluster view items over to those from widget-toolkit

otherui: tree: show tooltips for all entries that have sensible information

fixfix #3893: api/ui: node network: expose bridge VLAN IDs option to allow one to configure VLAN ranges, This can be useful for devices that support hardware offloading them, but only support a limited amount.

breakingui: remove experimental from change detection modes description

featureui: add import content type for file-based storages to allow handling imports of OVA/OVF backed archives more conveniently.

featureui: guest import: add storage selector for overriding the OVA staging storage for the temporary extraction.

otherui: import: show size for dir-based storages

otherui: enable upload/download/remove buttons for 'import' type storages

featureui: qemu: add AMD SEV configuration to Options

securityfix #5879: ui: add tooltip to security group comments

fixfix #5810: ui: show confirmation/warning dialog for sdn apply

featureapi: package repositories: add Ceph Squid to available repos

8.2.8 Oct 24, 2024

fixfix #5734: provide missing methods for Proxmox.Utils for mobile UI

otherapi: subscription update: report error if removing ceph-auth file fails

featureadd module to centrally track Ceph release info for the backend

otherpveceph: prompt user on TTY about installing experimental version

featureceph releases: add 19.2 Squid as available release, currently still as technology preview

fixfix #5753: api: add 'pstart' member to task status return schema

fixfix #5302: ui: vm cpu affinity displayed in hardware overview

fixfix typos in user visible strings

fixfix #5632: ui:storage: correct online help link of backup view

otherui: ceph wizard: show hint for releases that are in tech-preview state

otherui: ceph wizard: filter out enterprise repo for tech-preview releases

featureui: ceph wizard: add Ceph 19.2 Squid as installable release

otherapi: improve the API JSON schema of various API calls

8.2.7 Sep 23, 2024

featureapi: add missing schema annotations for download endpoints and adapt existing ones to renaming the respective property to 'download_allowed'.

otherpvesh: limit download handling to annotated endpoints to unify the behaviour with pve-http-server.

8.2.6 Sep 20, 2024

fixfix #5731: vzdump jobs: fix execution of converted jobs

8.2.5 Sep 12, 2024

otherui: qemu hardware: use background delay for asynchronous remove tasks so that the task log window doesn't get shown if the task already finished.

otherui: qemu hardware: use asynchronous remove API call for disk hot-unplug to expand the task duration timeout from 30 seconds to 10 minutes, helping overloaded and/or slow systems.

featurevzdump config: add fleecing property string to make it clear that fleecing can be configured as a node-wide default too.

fixui: fix align mode of the two-column container widget, which is used for the advanced tab of the backup job edit window.

fixvzdump: fix unit for bandwidth limit in log message, it's in KiB (base 2) not KB (base 10)

featurepve7to8: allow one to run arbitrary newer Proxmox kernels after upgrade

featureapi: replication: add 'job-id' to notification metadata to allow users to create notification match rules for specific replication jobs.

othervzdump: apt: notification: do not include domain in 'hostname' field.

otherapi: replication: include 'hostname' field for notifications.

fixpve7to8: fix typo in log message.

otherui: backup job: clarify experimental change detection modes.

fixui: fix maxcpu validity check in the host CPU renderer to add a missing space, making it consistent with the CPU usage column.

fixui: utils: fix inconsistency in host cpu usage display in search view, adding a missing space between the number of CPUs and the actual label.

fixui: sdn ipam: fix editing custom mappings

featureapi: ceph mds: ensure the ID for a new MDS does not start with a number, as Ceph doesn't supports that.

fixfix #5570 ui: ceph: make the MDS ID fully configurable to avoid a issue when the hostname, which is was used as base for the ID, starts with a number. This also made the "extra ID" field redundant.

fixfix #5010: ceph: pool set only properties that actually changed to avoid false-positive errors.

otherapi: backup jobs: pass the job ID parameter to make it accessible for the notification system.

featureui: backup jobs: allow one to set custom job ID in advanced settings

fixui: resource mappings: fix editing of mapping for non first node

otherui: sdn vnets: hide irrelevant fields depending on zone type

fixui: dc summary: fix calculation of storage size when one or more nodes are offline

featureapi: metrics: add /cluster/metrics/export endpoint

fixui: qemu: hardware: fix permission check for enabling the button to add a TPM-state volume

otherupdate shipped appliance info index

8.2.4 Jun 10, 2024

otherpvestatd: clear trailing newlines

featurewww: advanced backup: add pbs change detection mode selector

featurevzdump: add pbs-change-detection-mode to config template

8.2.3 Jun 4, 2024

otherupdate shipped appliance info index

featureapi: add proxmox-firewall to versions pkg list

othergitignore: ignore any test artifacts

othertests: remove vzdump_notification test

othernotifications: use named templates instead of in-code templates

8.2.2 Apr 23, 2024

fixui: fix form-reset behavior of backup job editor

fixui: backup jobs: fix fleecing parameters for 'run now' button

fixui: mobile: fix login for users that have a TOTP based second factor set up

otherui: mobile: show is setup is lacking the best recommendations for enterprise production set ups

othervzdump: also warn when hook script fails for backup-abort or log-end phase

featureui: user edit: protect user's TFA settings for new factor variants

fixfix #5251: ui: login: set autocomplete on password and user

otherui: esxi importer: try to better convey what live-import does

8.2 Apr 24, 2024 Release notes ↗

featureLatest 6.8 Kernel as new stable default

featureNew import wizard to migrate guests directly from other hypervisors. Connect to other hypervisors using their public APIs and directly migrate guests to Proxmox VE. First implementation is for VMware ESXi. Guests can be started on Proxmox VE while their data is still being imported to the target…

featureSupport for automated and unattended installation of Proxmox VE. Proxmox VE now ships a tool that prepares a Proxmox VE ISO for automated installation. The prepared ISO retrieves all required settings for automated installation from an answer file. The answer file can be provided directly in the…

featureBackup fleecing (advanced feature). When creating a backup of a running VM, a slow backup target can negatively impact guest IO during the backup process. Fleecing can reduce this impact by using fast local storage as a buffer for data blocks. However, the fleecing approach requires the use of…

featureModernized Proxmox VE firewall implementation based on nftables (opt-in technology preview). The new implementation is written in Rust and intended to replace the current firewall based on iptables in the future. Moving to nftables will improve robustness and make it possible to fix long-standing…

featureSeamless upgrade from Proxmox VE 7.4, see Upgrade from 7 to 8

featureFix an issue where the VM creation wizard would not allow creating a VM without an ISO.

featureFix an issue that prevented users from seeing accessible replication jobs.

featureFix an issue where the node summary page would not display the version of a running foreign kernel (issue 5121).

featureWhen editing LVM or directory storages, add an explanatory tooltip to the "Shared" checkbox.

featureExpose the saferemove setting for LVM storages in the GUI.

featureAdd some missing packages to the "Package versions" window.

featureWhen editing ZFS storages, display 16k as the blocksize placeholder to reflect the current ZFS defaults.

featureChange "Syslog" button to "System Log" button to better reflect that the log is gathered from the systemd journal.

featureFix an issue where the GUI used an incorrect language code for Korean, and provide a clean transition for users who still have a cookie with the incorrect language code set.

featureImprove documentation of the /nodes/{node}/status API call.

featureFix an issue where the date picker would choose the wrong date after changing to a different month.

featureWhen granting permissions to a group, make the group selector searchable, similar to the user and token selectors.

featureClarify the confirmation prompt for removing a certificate without a name.

featureFix an issue where edit windows would not be correctly masked while loading.

featureFix an issue where adding a storage to a pool would break edit windows of the same browser session, and guard against similar issues in the future.

featureDisplay the end-of-life message as a notice up until three weeks before the end-of-life date, and display it as a warning from that point on.

featureMove the "Reset" button for edit windows to an icon-only button in the title bar (issue 5277). This reduces the risk of misclicking and accidentally resetting form data.

featureFix xterm.js not loading in certain OS+Browser constellations, for example iOS (issue 5063).

featureChange the icon for editing guest notes from a gear to a more fitting pencil.

featureAllow to select note contents by double-clicking. Previously, this was not possible because double-clicking on a note would always open the editor window. This behavior can now be optionally disabled by a browser-local GUI setting.

featureThe TFA input field now sets an autocompletion hint for improved compatibility with password managers (issue 5251).

featureFix an issue where the mobile UI did not allow to log in with TOTP.

featureDisplay the subscription reminder in the mobile UI as well, for improved consistency with the GUI.

featureThe user edit window now disables the "Key IDs" field if the user has TFA configured.

featureThe HTTP server now supports compressing responses using deflate in addition to gzip.

featureImproved translations, among others:

featureFrench

featureGerman

deprecatedAvoid passing the deprecated noacl mount option for ext4 formatted volumes (issue 4846).

deprecatedDeprecate notification options that were only relevant in a short transition period before the final notification system was introduced.

breakingIntegrate patches that make it possible to manually install and use the upstream Ceph dashboard. Due to upstream changes, Proxmox VE 8.0 and 8.1 were incompatible with the Ceph dashboard.

deprecatedRestrict the values of legacy user-keys to the ones that were allowed in the deprecated initial TFA system.

breakingRemove deprecated and now forbidden priority field from change request to PowerDNS (issue 5275).

breakingModels using i40e. Their names can get an additional port suffix like p0 added.

+151 more items in the release notes

8.1.11 Apr 19, 2024

fixfix #4136: backup: implement fleecing option for improved guest stability when the backup target is slow

featureapi: notifications: add missing 'smtp' to index

otheruse SSH command helper for pvesh and to get VNC connection info to benefit from improvements like known host key pinning

othersystem report: list held-back and pinned APT packages and priorities of APT sources

othersystem report: avoid printing the contents of certain wrongly named configuration files

othersystem report: output cluster-wide job configuration

othersystem report: output kernel command line from current boot

featureui: acl: allow searching by typing in the group selector

otherapi: apt versions: track optional amd64-/intel-microcode and pve-esxi-import-tools packages

featureui: acme: add External Account Binding (EAB) related fields

fixfix #5093: ui: acme: expose custom directory option

breakingd/postinst: make deb-systemd-invoke non-fatal to avoid potentially breaking an update for unrelated reasons

fixfix #4513: ui: backup job: add tab for advanced options

othervzdump: improve handling performance settings, by using a per-property fallback and honoring the schema defaults

featureui: lxc: add edit window for device passthrough

featureui: lxc: add firewall log view filtering

fixfix #4963: ui: firewall: fix edge case where editing firewall rules using ips / cidrs would be broken

fixfix #1905: ui: VM: allow moving unused disks

fixfix #4759: ceph: configure ceph-crash.service and its key

featuresdn: evpn: allow empty primary exit node in zone form which was broken by a change in libpve-network-perl

8.1.10 Mar 28, 2024

featureguest import: allow setting VLAN-tag for network devices in advanced tab

8.1.8 Mar 27, 2024

otherui: parser: recognize Intel E1000E as network card

featureui: network card selector: add Intel E1000E as choosable model

featureui: guest import: allow setting mac addresses to newly generated unique ones

otherui: guest import: use box-label style for prepare-for-virtio checkbox

otherui: guest import: fine tune icons

otherui: guest import: validate that selected VMID does not exist yet

8.1.5 Mar 14, 2024

otherreport: format iptables output for readability

fixfix #5067: vzdump: include total backup size in notification

otherui: storage: zfs: set blocksize placeholder (empty text) to 16k

featureui: add compat for fix of previously wrongly used Korean language code

otherui: lvm: expose saferemove setting

featurepvesubscription: add missing return statement to avoid a failing null check and its error message.

fixceph: fix edge case of wrong files being deleted on purge

otherui: node: system: avoid using specific and outdated 'Syslog', just call it 'System Log'

fixfix #5106: ui: ceph status: make column wrap the summary text on expand

otherui: qemu: bump max cores to 256 by socket

otherapi: node status: document boot-info and current-kernel in return schema

featureapi: nodes: allow usage of query url metadata with Sys.AccessNetwork

otherui: storage: enable download-url button with Sys.AccessNetwork capability

otherui: IP-set: re-work column widths

8.1.4 Dec 14, 2023

otherapi: apt versions: track dnsmasq and frr-pythontools as optional packages

featureapi: node status: add guard for missing secure-boot efi var

otherui: iso selector: disable all fields to avoid bogus validation where one cannot confirm the dialog even though the values visible are correct

featureapi: replication: allow users to enumerate accessible replication jobs

fixfix #5121: ui: node status: avoid invalid array access for certain foreign kernels

8.1.3 Nov 23, 2023

fixui: pool view: fix editing nested pools

8.1 Nov 23, 2023 Release notes ↗

featureLatest 6.5 Kernel as new stable default

featureSecure Boot support. Proxmox VE now includes a signed shim bootloader trusted by most hardware's UEFI implementations. All necessary components of the boot chain are available in variants signed by Proxmox. The Proxmox VE installer can now be run in environments where Secure Boot is required and…

featureThe core of Proxmox VE's Software-Defined Network stack moved from experimental to supported and includes new features. Proxmox VE SDN allows fine-grained control of virtual guest networks at the datacenter level. The new automatic DHCP IP address management (IPAM) plugin can be used to…

featureNew flexible notification system. Send notifications not only via the local Postfix MTA, but also via authenticated SMTP or to Gotify instances. Flexible notification routing with matcher-based rules to decide which targets receive notifications about which events.

featureProxmox Server Solution GmbH, the company behind Proxmox VE development and infrastructure, was assigned an official Organizationally Unique Identifier (OUI) BC:24:11 from the IEEE to use as default MAC prefix for virtual guests. This OUI can be used for virtual guests inside private networks by…

featureCeph Reef is now supported and the default for new installations. Reworked defaults brings improved performance and increased reading speed out of the box, with less tuning required.

featureSeamless upgrade from Proxmox VE 7.4, see Upgrade from 7 to 8.

featureImprovements to bulk actions:

featureAdd a new "Bulk Suspend" action to suspend a selection of guests in one action.

featureAdd a new section above the guest list for configuring guest filters and add a button for clearing filters.

featureAllow to filter guests by their tags.

featureReorder fields and drop obvious warning about local storage to improve on screen-space utilization.

featureReword the message displayed for bulk actions in the task log to "Bulk Start/Stop/Migrate". The message shown previously was "Start/Stop/Migrate all" and could be misleading in case not all guests were affected (issue 2336).

featureThe "Bulk Migrate" action is now hidden on standalone nodes, as there is no valid migration target in that case.

featureImprovements to the node summary panel:

featureThe summary now indicates whether the node was booted in legacy (BIOS) mode, EFI mode, or EFI mode with Secure Boot enabled.

featureThe currently running kernel is now reported more compactly by indicating only the version and the build date.

featureAllow to automatically decompress an ISO file when downloading from a URL to a storage. The decompression algorithm can be set in the GUI (issue 4849).

featureAllow moving VMs and containers from one pool to a different pool in one operation.

featureAvoid needlessly reloading the GUI after ordering a certificate via ACME for a different cluster node.

featureThe permission editor now also shows the ACL paths for notifications and PCI/USB mappings.

featureThe resource tree now displays the usage in percent when hovering over a storage.

featureIf the configured tree shape for tags is not "Full", the resource tree now displays a tooltip with the tag name when hovering over the configured shape.

featureEnsure the SPICE config is downloaded with the correct file extension on Safari to avoid problems with macOS application association (issue 4947)

featureFix an issue where the "Migrate" button stayed disabled even if selecting a valid target node.

featureFix a bug where the backup job editor window would add an invalid entry for VMID 0 when using selection mode "all".

featureImprove error message when creating a VM with an invalid hostname: Clarify that a valid hostname, not a valid DNS name, is expected (issue 4874).

breakingRemove the 10-minute timeout for allocating VM disks when restoring from backup, as this timeout may be exceeded if disks are large or network storage is involved (issue 2817).

deprecatedLog a warning when starting a VM with a deprecated machine version.

deprecatedMark global pg_bits setting as deprecated and make it a no-op. The setting has been deprecated since Ceph 13.

breakingUsing the Console/Shell on a PVE node is now possible for all users with the appropriate permissions (Sys.Console). The restriction to the pam was removed. The users will still need to login as a system user on the shell though.

breakingWith Kernel 6.5 and ZFS it can happen that the host hits a kernel bug when starting a VM with hugepages, and the host must be rebooted. More information can be found in the forum and in the bug reports for ZFS and Linux kernel.

breakingSome users with Intel Wi-Fi cards, like the AX201 model, reported that initialization of the card failed with Linux kernel 6.5. This is still being investigated. You should avoid booting into the new kernel if you have no physical access to your server and an Intel Wi-Fi device is used as its only…

breakingSome SAS2008 controllers need a workaround to get detected since kernel 6.2, see the forum thread for details.

breakingFor certain Linux VMs with OVMF and guest kernels >= 6.5, there might be issues with SCSI disk hot(un)plug. This is a more general issue and is currently being investigated and will be fixed on Linux upstream.

breakingThe TPM (Trusted Platform Module) hardware random number generator (RNG) is now disabled on all AMD systems equipped with a firmware-based TPM (fTPM) device. This change was implemented due to such RNGs causing stutters in many systems. Affected systems should switch the RNG source from /dev/hwrng…

breakingSome Dell models, which appear to include all those using a BCM5720 network card, have a compatibility issue with the tg3 driver in the kernel based on version 6.5.11. From our current understanding 14th Generation Dell Servers (T140, R240, R640,...) are affected, while others (e.g., R630, R620,…

breakingSystems installed on top of Debian or those installed before Proxmox VE 7.0 will be switched by default from the ifupdown network configuration implementation to the modern ifupdown2. This switch occurs because the stabilized SDN package is now marked as a recommendation for various Proxmox VE…

breakingThe pve-edk2-firmware package, which provides (U)EFI firmware for virtual machines, has been split up in multiple packages. Users of the fully supported amd64/x86_64 architectures do not need to change anything. The OVMF variants, used for amd64/x86_64 based virtual machines, got moved into…

breakingWith the 8.1 machine version, QEMU switched to using SMBIOS 3.0 by default, utilizing a 64-bit entry point. Since the SMBIOS 32-bit and 64-bit entry points can coexist, and most modern operating systems set up both, the general impact should be minimal However, certain operating systems or…

+142 more items in the release notes

8.0.9 Nov 18, 2023

othermove default link config to drop-in snippet to avoid that the all default fallback settings are overridden, not just the MACAddressPolicy one we actually want to change.

8.0.8 Nov 17, 2023

otherupdate shipped appliance info index

featurereport: add files from interfaces.d and SDN config directories

featurenode console: allow usage for non-pam realms, users still need to login with credential recognized by PAM

featureui: wizards: allow adding tags in the qemu/lxc create wizard

otherui: guest wizard: increase height slightly to match 4:3 ratio

otherpve7to8: check for proper grub meta-package for bootmode

fixfix #4631: ceph: osd: create: add osds-per-device

fixfix #2336: ui: adjust message for bulk start/stop/migrate to better reflect that not always all guests are selected

featureui: bulk actions: rework filters and allow one to filter by tags

featureui: add tooltips to non-fully-expaned tags globally

deprecatedceph: mark global pg bits setting as deprecated

otherui: hide bulk migrate options on standalone nodes

fixfix #4497: acme: add support for external account bindings

deprecatedapi/acme: deprecate 'tos' endpoint in favor of new, more general, 'meta' one

featureapi: add bulk-action endpoint for mass-suspendig (hibernating) virtual machines

featureui: add bulk-action suspend to node menu

fixfix #4442: add date-time range filtering for firewall logs

featureui: ceph status: add pg warning state

otherui: ceph status: rename 'working' state into 'busy'

otherapt: use apt changelog for changelog fetching

otherui: ipset: make ip/cidr required

othership default link config to disable systemd link mac-policy, avoiding that systemd marks the network as being without carrier, which can result into issues for some network configurations like source-NAT if no TAP device is (yet) connected to the bridge.

breakingapi: osd destroy: remove the mclock max iops settings to avoid that it's reused when a new OSD gets the same OSD ID again

fixpvesh: proxy handler: fix handling array parameters

breakingapi: notification: remove notification groups and filters, they are replaced by a matcher based routing system.

featureapi: various adaptions to new matcher based notification system

featurenotify: add API routes for smtp endpoints

featureapi: notification: add 'disable' and 'origin' params

otherapi: notification: simplify ACLs for notification

8.0.7 Oct 29, 2023

fixfix #3069: vzdump: add property 'performance: pbs-entries-max=N'

fixfix #4849: ui: allow decompressing ISO files when downloading

otherpve7to8: update checks from stable-7 branch

otherui: vm selector: gracefully handle empty IDs in setValue function

otherui: subscription upload: trim key from whitespace on submission

otherapi: subscription update: actually ignore surrounding whitespace

otherhw-address: check if source file changed so cache needs update

otherui: ceph: improve discoverability of warning details

featureui: ceph wizard: switch to reef as default release for new setups

otherpvesh: decode streamed responses

featureui: container guest status: show privileged status as new row

otherui: container guest status: show distro logo and name in summary header

fixui: tags: fix focus for edit mode

featuresdn: controllers: add isis controller

breakingsubscription: remove ceph APT auth if invalid

featureui: datacenter config: adapt to new default MAC prefix

featureui: disable new notification UI for now, will be reworked

8.0.6 Sep 8, 2023

fixfix #4663: Prevent Web UI reload on cert order for other node

otherwebsite: update external links to www.proxmox.com

fixvzdump: fix notifications for backing up VMs with 2+ disks to PBS

otherapi: ceph: improve reporting of ceph OSD memory usage, using PSS metric now which avoids ignores page-cache that can be freed easily and also measures shared memory in proportional relations.

otherpveceph: support installing Ceph 18.2 Reef

featureui: ceph wizard: add Ceph 18.2 Reef to available releases

otherui: ldap: ad: support 'mode' parameter, replacing 'secure'

otherui: ldap: ad: replace occurrences of SSL with TLS

fixfix #4947 spice: correct filename-extension handling for Safari

fixfix #4808: ceph: mds create: use snake_case when setting options

featureui: pool view: replace allow-transfer checkbox with simple hint

featureapi: pool update: rename 'transfer' parameter to 'allow-move'

8.0.5 Aug 16, 2023

featureadd 'check connection' checkbox for ldap as advanced option

fixfix #474: allow transferring VMs between pools

featureadd api endpoints and UI for notification subsystem

8.0.4 Aug 1, 2023

fixui: migrate: fix disabled migrate button glitch

otherupdate shipped appliance info index

otherpve7to8: sync over from stable-7 branch

fixpve7to8: fix Ceph noout check

fixfix #4551: ui: use gettext on hardcoded byte units

fixfix #4364: pveceph: add confirmation dialogue for ceph installation

fixfix #4758: ui: lxc wizard: allow multiple ssh keys

fixui: sdn: zonedit: fix non-advanced display

otherui: active directory realm: expose case-sensitive option

featureui: add some missing htmlEncodes

otherhandle pve-kernel -> proxmox-kernel rename

8.0.3 Jun 21, 2023

otherui: use common gettext for IOMMU-Group

otherpve7to8: content-dirs check: skip paths that cannot be resolved

otherpve7to8: avoid confusing warning about required setting 'storage' for vzdump

featurepve7to8: add check for systemd-boot presence, where needed.

8.0 Jun 22, 2023 Release notes ↗

breakingWorkaround breaking driver changes in newer Nvidia grid drivers, which prevented mediated devices (mdev) to be reclaimed upon guest exit.

deprecatedReplace usages of deprecated -no-hpet QEMU option with the hpet=off machine flag.

deprecatedThe rsync invocation used when joining nodes via ssh, which is deprecated, has been adapted to changes in rsync CLI argument parsing in Bookworm.

breakingAdd support for new Ceph enterprise repositories. When installing Ceph via pveceph install or the web UI, you can now choose between the test, no-subscription and enterprise (default) repositories. The -test-repository option of the pveceph install command was removed.

breakingDrop support for Ceph Octopus and Pacific, as they are not supported in Proxmox VE 8.

breakingRemove overly restrictive validation of public_network during monitor creation. Configuring a public network like 0::/0 or 0::/1 caused a superfluous "value does not look like a valid CIDR network" error.

deprecatedThe access/ticket API endpoint does not support the deprecated login API (using new-format=0) anymore.

breakingRemove the Permission.Modify privilege from the PVESysAdmin and PVEAdmin roles and restrict it to the Administrator role. This reduces the chances of accidentally granting privilege modification privileges.

breakingFix an issue where an allowed special ICMP-type could accidentally be added as destination port for a layer 4 protocol, breaking firewall rule loading.

breakingOutdated pve6to7 compatibility check script was removed.

breakingFirefox 79 (released on 2020-07-28)

breakingChrome/Chromium 85 (released 2020-08-25)

breakingSafari 14 (released 2020-09-16)

breakingStorage activation now checks that every content type uses a different directory, in order to prevent unexpected interactions between different content types. This breaks setups in which the content-dirs option was set up to map different content types to the same directory, and setups in which…

breakingThe mkdir option is considered deprecated, it got split into create-base-path and create-subdirs as fine-grained replacement. While Proxmox VE will continue to support this option during the 8.x release series, we recommend switching over to the new options already now.

breakingPrevious 6.2 kernels had problems with incoming live migrations when all of the following were true:

breakingVM has a restricted CPU type (e.g., qemu64) – using CPU type host or Skylake-Server is ok!

breakingthe source host uses an Intel CPU from Skylake Server, Tiger Lake Desktop, or equivalent newer generation.

breakingthe source host is booted with a kernel version 5.15 (or older) (e.g. when upgrading from Proxmox VE 7.4)

breakingKernels based on 6.2 have a degraded Kernel Samepage Merging (KSM) performance on multi-socket NUMA systems. Until we either find a targeted fix for our kernel, or change the default kernel to a 6.5 based kernel (planned for 2023'Q4), the current recommendation is to keep your multi-socket NUMA…

breakingDepending on the workload this can result in a significant amount of memory that is not deduplicated anymore.

breakingThis issue went unnoticed for a few kernel releases, making a clean backport of the fixes made for 6.5 hard to do without some general fall-out.

breakingQEMU 8.0 removed some previously deprecated features. Proxmox VE 8 won't use the -chardev tty and -chardev parport aliases anymore, and no other features were used by the Proxmox VE stack. Thus, only installations using args inside their guest configs need to check the compatibility. See the Qemu…

breakingThe removed features in QEMU 8.0 also include the Proxmox VE-specific, but unused/deprecated QMP commands get_link_status, snapshot-drive and delete-drive-snapshot.

breakingOnly root@pam is now allowed to clone and restore guests with passed through PCI/USB devices that are not using the new mapping feature. To allow regular users to clone and restore with PCI/USB devices, create a mapping and give the user 'Mapping.Use' on that.

breakingTrying to pass through the same PCI device multiple times in a single guest now fails earlier. A qm showcmd for example does not generate an output anymore in that case.

breakingWhen passed through device is configured as multifunction (or 'All Functions' in the web UI) with a set mediated device (mdev) this now generates an error instead of a warning. Use the specific function instead.

breakingcloud-init: If the VM name is not a FQDN and no DNS search domain is configured, the automatically-generated cloud-init user data now contains an additional fqdn option. This fixes an issue where the hostname was not set properly for some in-guest distributions. However, the changed user data will…

breakingMigration doesn't scan all local storages for orphaned volumes anymore. Instead, only the volumes referenced in the configuration (including snapshots) are picked up. This avoids unexpected errors where an unavailable local storage could fail migration even if no volume referenced that storage.

breakingThe lxc.id_map configuration key has been deprecated for a long time by lxc and was replaced by lxc.idmap. With this release, its presence is considered an error. The key can only be present if it was manually added to a guest configuration.

breakingThe lxcfs is now built with fuse 3. This upgrade is done on a major release, since all running containers need to be restarted afterwards.

breakingThere is a new SDN.Use privilege (and corresponding PVESDNUser role) that is required to configure virtual NICs in guests. See "Access control" section above for details!

breakingThe Permission.Modify privilege has been removed from the PVESysAdmin and PVEAdmin roles, in order to reduce the chances of accidentally granting the privilege to modify privileges. If a particular setup requires a role with this privilege, it is necessary to define a new custom role and use that…

breakingUsers with VM.Allocate/Datastore.Allocate/Pool.Allocate privileges, but without the Permissions.Modify privilege, can now only assign a subset of their own privileges to specific VM/storage/pool paths. Previously they could assign any role to specific VM/storage/pool paths. As the privileges…

breakingEditing backup jobs now generally requires the Datastore.Allocate privilege on the target storage, and editing backup jobs with dumpdir requires root privileges.

breakingUser accounts will now be locked after too many attempts to authenticate with a second factor. This is intended to protect against an attacker who has obtained the user password and attempts to guess the second factor. Unlocking requires either a successful login with a recovery key or a manual…

breakingSystems booting via UEFI from a ZFS on root setup should install the systemd-boot-efi package after the upgrade. The systemd-boot was split out from the systemd package for Debian Bookworm based releases. It won't get installed automatically upon upgrade from Proxmox VE 7.4 as it can cause trouble…

breakingThe API can handle array-type data differently, while trying staying backward compatible. Instead of being able to pass the individual elements separated by null bytes, you can pass the data directly as array.

breakingBefore Proxmox VE 8, the API endpoint to trigger a QEMU guest agent (QGA) command execution (/nodes/{node}/qemu/{vmid}/agent/exec) allowed passing a command as a single string, which would then be automatically split at whitespace. This was deemed too brittle and is not supported anymore. You must…

breakingThe Open vSwitch (OVS) version shipped with Proxmox VE 8 / Debian Bookworm contains a bug that causes it to fail to provide a working network when run on a system with 2 CPU cores or less. This is caused by the handler responsible for filling the forward database (FDB) not being started, so…

+114 more items in the release notes

7.4 Mar 23, 2023 Release notes ↗

featureProxmox VE now provides a dark theme for the web interface.

featureGuests in resource tree can now be sorted by their name, not only VMID.

featureThe HA Cluster Resource Scheduler (CRS) stack was expanded to rebalance VMs & CTs automatically on start, not only recovery.

featureAdded CRM command to the HA manager to switch an online node manually into maintenance mode (without reboot.

featureAdd a fully-integrated "Proxmox Dark" color theme variant of the long-time Crisp light theme.

featureAdd "Proxmox Dark" color theme to the Proxmox VE reference documentation.

featureLocal storage types that are located on other cluster nodes can be added.

featureAutomatically redirect HTTP requests to HTTPS for convenience.

featureTask logs can now be downloaded directly as text files for further inspection.

featureIt is now possible to choose the sort-order of the resource tree and to sort guests by name.

featureFix loading of changelogs in case additional package repositories are configured.

featureImprove editing of backup jobs:

featureAdd a filter to the columns of the guest selector.

featureShow selected, but non-existing, guests.

featureRemove the "Storage View" mode from the resource tree panel.

featureThe Proxmox Backup Server specific columns for verification and encryption status can now be used for sorting in the backup content view of a storage.

featurePolish the user experience of the backup schedule simulator by splitting the date and time into two columns and better check the validity of the input fields.

featureImprove accessibility for screens with our minimal required display resolution of 720p

featureadd scrolling overflow handler for the toolbar of the backup job view

featurerework the layout of the backup job info window for better space usage and reduce its default size

featureFix search in "Guests without backup" window.

featureNode and Datacenter resource summary panels now show the guest tag column by default.

featureShow role privileges when adding permissions.

featureAllow the use of the `-` character in snapshot names, as the backend has supported this for some time.

featureUpdate the noVNC guest viewer to upstream version 1.4.0.

featureFix overly-strict permission check that prevented users with only the VM.Console privilege from accessing the noVNC console.

featureAlign permission check for bulk actions with the ones enforced by the API.

featureInvalid entries in advanced fields now cause the advanced panel to unfold, providing direct feedback.

featureHTML-encode API results before rendering as additional hardening against XSS.

featureFix preselection of tree elements based on the URL after login.

featureFix race condition when switching between the content panel of two storage before one of them hasn't finished loading.

featureMetric server: Expose setting the verify-certificate option for InfluxDB as advanced setting

featureReplace non-clickable checkbox with icons for backup jobs, APT repositories, and replication jobs.

featureFix error when editing LDAP sync setting and only a single parameter is not set to a non-default value.

featureAdd missing online-help references for various panels and edit windows.

breakingIn QEMU 7.2, it is a hard error if audio initialization fails rather than a warning.

breakingWith pve-edk2-firmware >= 3.20221111-1 we know of two issues affecting specific set ups: Possible workarounds are to assign more memory or to use kvm64 as the CPU type. The background for this problem is that OVMF << 3.20221111-1 used to guess the address (bit) width only from the available…

breakingvirtual machines using OVMF/EFI with very little memory (< 1 GiB) and certain CPU types (e.g. host) might no longer boot.

breakingThe (non-default) PVSCSI disk controller might result in SCSI disk not being detected inside the guess in regressions.

breakingBecause of hardware errata, the XSAVES feature had to be disabled by the kernel for certain AMD CPUs, resulting in start issues with VMs and certain VM CPU types like EPYC-ROME.

+94 more items in the release notes

7.3 Nov 22, 2022 Release notes ↗

featureCeph Quincy support. It is also the default for new installations

featureInitial Cluster Resource Scheduling (CRS) support

featureTags for Virtual Guests in web-interface for better categorizing/searching/...

featureSupport for Proxmox Offline Mirror to update and manage subscriptions of air gapped systems

featureShow tags for virtual guests in the resource tree and allow edits.

featureImproved UX for mediated PCIe devices - they now also show the name.

featureImproved Certificate View - for example for certificates with many SANs.

featureNode disk UI: gracefully handle adding the same local storage (e.g. a zpool with the same name) to multiple nodes.

featureExpose node configurations like wakeonlan and the delay for starting guests on boot for each node in the web interface.

featureImproved translations, among others:

featureArabic

featureDutch

featureGerman

featureItalian

featurePolish

featureTraditional Chinese

featureTurkish

featureImprove rendering complex formats in the api-viewer widget

featureNew major version of QEMU 7.1

featureSupport for pinning a VM to certain CPU cores via taskset

featureIn the web interface, new VMs default to iothread enabled and VirtIO SCSI-Single selected as SCSI controller (if supported by the guest OS)

featureNew VMs use qemu-xhci USB controller, if supported by the guest OS (Windows >= 8, Linux >= 2.6)

featureAllow up to 64 rx and tx multi-queues (previously 16)

featureLonger timeouts between sending SIGTERM and SIGKILL to allow for a cleanup upon termination

featureNew major LXC version 5.0.0

featureSupport for newer distribution versions:

featureNew pre-made templates available for:

featureAdd option to disable MAC learning on bridges (the guest-mac addresses are added statically, no broadcast packets are flooded to those ports, thus no spurious answers are replied, which broke certain hoster network setups)

featureImprove cleanup of backup-jobs upon purging the configuration for a removed VM

featureOptionally restart a guest after rollback to snapshot

featureFramework for remote migration to cluster-external Proxmox VE hosts

featureCluster Resource Scheduling (CRS) tech-preview: Improve new-node selection for when the HA Manager needs to find a new host node for a HA service, in the following cases:

featureImproved namespace support for the Proxmox Backup Server storage type

featureAdded option repeat-missed, allowing one to opt-out from the default behavior of running missed jobs on a new boot

featureThe VM used for single-file-restore with QEMU guests now has support for increasing its memory (e.g. to handle many ZFS datasets inside the guest)

featureImproved UX when creating new clusters

featureAdded heuristic checks if it is OK to stop or remove a ceph MON, MDS, or OSD service.

securityFirewall security groups can now be renamed with the changes directly being picked up from pve-firewall

securityImproved input sanitization of API URLs as additional security layer.

breakingVirtual Guest Tags: Duplicate tags are now filtered out when updating the tag property of a virtual guest. Duplication detection and sorting is handled case-insensitive by default, all tags are treated lower case. One can change that in the datacenter.cfg configuration using the case-sensitive…

+76 more items in the release notes