Proxmox VE 9.0.10 → 9.2.11
37 releases · 13 breaking changes · 3 security fixes · 0 advisories fixed
3security13breaking8deprecated144feature52fix
Breaking changes
- breaking api: ceph: mds: deprecate hotstandby parameter in the API schema, and do not set the mds_standby_for_name and mds_standby_replay config options any more, they were removed in Ceph 14.1 and setting them has no effect any more in 9.2.10
- breaking ui: qemu: default aarch64 VMs to a KVM-usable CPU model instead of one that QEMU rejects at start, and warn when an incompatible ARM CPU model is selected. in 9.2.9
- breaking Remove redundant checks for USB hotplug support and unplug events during unrelated VM configuration changes. in 9.2
- breaking Windows VMs using machine versions 11.0 or 11.0+pve1 are potentially affected by this issue. Such guests may have been created with the packages available in the Proxmox VE 9.2 ISO or qemu-server older than 9.2.0. Upgrading the qemu-server package and setting the machine version to 11.0+pve2 or… in 9.2
- breaking Windows VMs using machine version 11.0+pve2 or newer are not affected by this issue. Under qemu-server 9.2.0 or later, new Windows VMs are created with an unaffected machine version. in 9.2
- breaking Windows VMs using machine versions older than 11.0 are not affected if using qemu-server 9.2.0 or newer. in 9.2
- breaking ui: sdn: fabrics: add management UI for the new WireGuard fabric protocol. New panels under Datacenter > SDN > Fabrics let users create and edit WireGuard interfaces with their peer references on internal nodes, manage external peer definitions, and review per-node available peers. Public keys,… in 9.1.12
- breaking fix #2077: pvenode: drop dependency on GNU readline Perl module in favor of our own PTY module. While it's less flexible, it's much simpler and robust, and–more importantly–it has no issues with being instantiated more than once, which recently became an error in the readline module, breaking EAB… in 9.1.2
- breaking Remove notice marking AMD SEV-ES and SEV-SNP as highly experimental. in 9.1
- breaking Remove the computed and obsolete group field from the service status data. in 9.1
- breaking Remove obsolete checks and warnings concerning RRD migration. in 9.1
- breaking ui: ha: remove default focus from VM/CT dropdown in resource edit window to avoid opening the picker immediately when opening the window. in 9.0.12
- breaking ui: guest snapshot: remove excess '}' at the end of window title in 9.0.11
Security changes
- security Fix a boot issue for Windows guests with Virtualization-based Security (VBS) enabled by disabling the cet-ibt and cet-ss CPU flags. in 9.2
- security Prevent local "copy.fail" privilege escalation exploit via AF_ALG sockets within containers by using seccomp filtering (PSA-2026-00018-1). If AF_ALG support is required in a specific container, see the security advisory forum post for more details. in 9.2
- security Fine-grained control of nested virtualization for VM guests. Some VM guest workloads need access to the host CPU's virtualization extensions for nested virtualization. Examples are nested hypervisors or Windows guests with Virtualization-based Security enabled. The host CPU type makes all CPU… in 9.1
Deprecations
- deprecated Switch from the deprecated block-job-complete to the newer job-complete QMP command. in 9.2
- deprecated Deprecate and warn about raw cgroup v1 entries in the container configuration. The support for cgroup v1 will be removed in a future release. in 9.2
- deprecated Switch from the deprecated /etc/timezone to the recommended timedatectl to initialize the containers timezone setting (issue 7175). in 9.2
- deprecated Deprecate the legacy starttime and dow parameters of the backup job API in favor of schedule. The legacy parameters were superseded by schedule since Proxmox VE 7.1 and have now been removed from the API response. in 9.2
- deprecated api: backup: deprecate the legacy 'starttime' and 'dow' parameters in favor of 'schedule' and drop them from the API response, as they have been superseded since PVE 7.1. in 9.1.8
- deprecated fix #7175: replace deprecated /etc/timezone handling with systemd timedatectl. in 9.1.7
- deprecated api: workaround broken 'maxworkers' alias in bulk actions api calls. For the new, cluster-wide bulk actions, only the 'max-workers' spelling would have an effect. For the pre-existing node-specific bulk migration, an error would occur when specifying the deprecated 'maxworkers' spelling, causing… in 9.1.3
- deprecated rrdtool is rebuilt to provide a native systemd unit file. The ListenStream directive was updated to not print a deprecation warning by using /run as directory for the socket. in 9.1
Every release in between
9.2.11 Aug 14, 2026
otherui: certificates, lxc DNS, VM cloud-init and PCI: encode rendered values with htmlEncode.
featureui: acme: use improved URL rendering implementation from proxmox-widget-toolkit.
9.2.10 Aug 7, 2026
otherpveperf: make bogomips regular expression case insensitive, other architectures like Loong64 use different capitalization
otherui: LXC templates: hide foreign architectures by default, arm64 and amd64 look very similar and can be easily confused
otherui: appliance templates: rename the "Package" column to "Name"
featureui: LXC templates: add a search hint to the "download" dialogue and widen the search input field
breakingapi: ceph: mds: deprecate hotstandby parameter in the API schema, and do not set the mds_standby_for_name and mds_standby_replay config options any more, they were removed in Ceph 14.1 and setting them has no effect any more
9.2.9 Aug 3, 2026
breakingui: qemu: default aarch64 VMs to a KVM-usable CPU model instead of one that QEMU rejects at start, and warn when an incompatible ARM CPU model is selected.
9.2.7 Aug 2, 2026
featureceph: when installing, offer only the Ceph releases that have packages for the node's architecture, from a new per-node API endpoint instead of a hardcoded list, so an arm64 node no longer lists releases without an arm64 build.
othersubscription: bind keys to a CPU architecture; arm64 keys carry an explicit marker, and a key that does not match the node's architecture is rejected in the API and CLI and flagged early in the web interface.
othercontainers: show the appliance template architecture in "pveam available" and the template selector, and point out when it differs from the node it would run on.
fixfix #7187: add the ethtool output for physical network interfaces to the system report, to help debug link and offloading issues.
featureadd tooltips describing the acceleration modes to the VM CPU flag selector.
otherpvesh: support API paths whose parameters are described through composed 'allOf' or 'oneOf' schemas, which the HA rules endpoints use as of libpve-common-perl 9.1.21, so that their options keep being accepted.
9.2.6 Jul 31, 2026
otherfabrics: wireguard: node edit: use network selector for internal nodes, making the semantics of the field more obvious, and entering values less error-prone and manual.
otherapi: apt: versions: track proxmox-enterprise-support-keyring version
featureui: ha: node affinity: refactor and extend UI, allow configuring "positive" or "negative" affinity rules. negative affinity allows declaring nodes on which HA resources must not (strict rule) or should not (non-strict) run on.
featureui: ha: resource affinity: add hint for affinity type config value, mapping "positive" to "Keep Together", and "negative" to "Keep Separate", like the create/edit dialogue already did before.
otherui: ceph: pool: set target ratio to 0 when the value is not set, to explicitly clear the value instead of not sending the value to the backend and keeping the previous value set.
9.2.5 Jul 15, 2026
featureceph: add guided rolling-restart for Ceph daemons, available both from the API and the web interface, so operators can safely cycle all OSDs, monitors, managers or metadata servers of a cluster after a configuration or kernel change without hand-rolled scripts. Each step waits for the previous…
fixceph: osd: drop two obsolete cleanup workarounds now handled elsewhere: Ceph itself runs 'pvremove' while zapping an OSD, so our own call could fail on an already-removed physical volume, and the udev trigger worked around a systemd bug fixed long ago.
otherceph: skip re-broadcasting the Ceph service status to the cluster file system on every pvestatd cycle when nothing changed, avoiding needless pmxcfs writes.
fixfix #6948: ui: ceph: configuration database: automatically show the MASK column once any entry uses a mask, so masked settings such as 'osd/class:hdd' are no longer indistinguishable from cluster-wide ones.
fixui: sdn: fabrics: fix adding and editing BGP unnumbered interfaces, which carry no per-interface IP address. The IPv4 column is now optional and stale 'ip'/'ip6' properties are no longer submitted, which previously made the backend reject the interface as not defined in the schema.
otherapi: sdn: avoid a double slash in delete request URIs, which a strict firewall or proxy could reject even though the server normalizes it.
fixfix #7460: ui: sdn: point the BGP and IS-IS controller help buttons to their own documentation sections instead of the EVPN one.
otherui: VM boot order: hint that OVMF (UEFI) guests need a virtual RNG device for PXE network boot to work.
otherui: VM vCPU: drop the artificial upper limit on the socket count in the edit dialog, matching the backend which imposes none.
featurepostinst: add kernel NBD devices to the global LVM filter on new installations, to avoid clashes with volume groups on NBD-mapped external disks, for example nested Proxmox VE systems or disks accessed by external backup providers.
otherupdate shipped appliance info index.
9.2.4 Jun 29, 2026
fixfix #4130: external metric server: keep node status updates flowing when a TCP metric server is unreachable. A failed connection previously raised an unhandled exception that aborted the whole node status update, so storage and guest status indicators in the UI eventually turned gray.
fixfix #6348: ui: bulk action: render the resource tags in the selection list using the configured tag style instead of plain text.
featureui: node: show the system log in a structured journal view that colors entries by syslog priority and adds server-side filters for the minimum priority, a systemd unit, a syslog identifier and kernel-only messages, with autocompletion for the unit and identifier filters.
otherui: node: open a service's log in that structured journal view, scoped to the service's systemd unit, instead of as plain text.
otherui: VM CPU flag selector: replace the per-flag radio group and the separate read-only state column with a single Off/Default/On segmented button that both shows and sets the state, and re-enable column sorting.
otherui: custom CPU model: validate the name in the creation dialog against the allowed config-ID format, rejecting invalid names in the frontend instead of only after the backend refuses them.
fixui: sdn: fabrics: fix editing a node interface that already has an IPv6 address, which did not show up and failed to submit because the field was named 'ipv6' instead of the 'ip6' the schema expects, and label the interface address column 'IPv4' instead of the ambiguous 'IP'.
fixui: fix the QEMU version comparison behind the dynamic USB port limit, which wrongly required the minor version to also be greater or equal even when the major version was already newer, so the higher USB port count for capable machine and OS types was not offered.
otherui: stop displaying a misleading 0% disk usage for VMs in the resource views; the field is left empty again, as VM disk usage is not currently queried from the guest agent.
9.2.3 May 24, 2026
featureui: storage content: show the owning guest of a volume and add an action to jump to it.
otherapi schema: cluster options: declare the actual return schema type.
9.2.2 May 21, 2026
featuresdn: fabrics: wireguard: drop the separate endpoint-port field added to the node-edit window in 9.1.19. The underlying schema change in proxmox-ve-config has been reverted: the endpoint now stores only the host, and the connect port is derived from the referenced interface's listen_port at…
featuresdn: fabrics: tighten the fabric and node configuration forms: require at least one prefix, hide node address fields for prefix families that are not configured on the fabric, and disable prefix editing once nodes have been added (since changing the prefix would invalidate existing nodes).
otherui: VM CPU flag selector: disable column sorting as a stop-gap, since sorting and then editing a flag could leave the radio-button widgets in moved rows showing the wrong selected state.
featureLatest 7.0 Kernel as new stable default
featureDynamic Load Balancing with the Cluster Resource Scheduler (CRS). In dynamic scheduling mode, the CRS uses real-time node and guest resource utilization metrics to balance HA-managed guests. The new load balancer can automatically migrate HA-managed guests to lower the overall node imbalance…
featureNumerous improvements to the Software Defined Networking (SDN) stack: Add WireGuard and BGP as new fabric protocols. Add support for route maps and prefix lists for fine-grained BGP/EVPN route filtering. Further additions include route redistribution for OSPF fabrics, additional options for…
featureManagement of custom CPU models from the web interface. A new section in the Datacenter → Guest Resources/Hardware allows creating, editing, and removing custom CPU models from the web interface. Custom CPU models allow tailoring the virtual CPU exposed to VMs to a specific set of features. The VM…
featureDisarm and arm HA for safer cluster maintenance. The HA stack can now be disarmed cluster-wide via the new disarm-ha and arm-ha CRM commands. This allows for planned, cluster-wide maintenance work, such as changes in the cluster network, without triggering any node fencing events. The HA resource…
featureKernel 7.0 as new stable default.
featureCeph Tentacle 20.2.1 is available as stable option.
featureExpose the parallel worker count for all bulk actions, not only for bulk migrations. An empty value falls back to the new auto default, which preserves backwards-compatibility with older nodes in a mixed-version cluster.
featureMake several improvements to the task viewer:
featureAdd a Download button to download a task log directly without opening the full task viewer popup (issue 7087).
featureDerive the task end-time from the polled task status if the caller did not provide it, ensuring finished tasks show the correct duration.
featureMake various improvements to the login flow:
featurePreserve deep-link fragments (e.g. /#vNNN) across an OpenID Connect login to make users land on the requested resource (issue 7337).
featurePrevent the realm selection from being changed on the login page as a side-effect of unrelated user creation (issue 7149).
featureReset the UI state on automatic logout to protect users who share a workstation.
featureAllow creating snapshots and backups directly from the resource tree context menu (issue 6209).
featureImprove the rendering of nested pools in the resource view by grouping the child pools under their parent pool.
featureAdd an architecture column to the resource store, enabling other views to display the architecture of a node.
featureFix the OSD toolbar overflowing on narrow viewports.
featureFix the CephFS page not being scrollable when multiple MDS are configured (issue 6234).
featureFix sorting of the Two-Factor Authentication (TFA) column in the datacenter, permission, and user grids (issue 7191).
featureFix the network section being unavailable in the folder view (issue 7125).
featureImprove the "Confirm Remove" dialog layout to properly accommodate larger fields and components.
featureAllow creating network bonds without specifying the bond-primary option to match the backend, which treats the value as optional (issue 4911).
featureUse the correct IANA timezone name Europe/Kyiv in the timezone selector (issue 7141).
featureSmaller fixes and improvements:
featureFix parsing of property strings whose values contain an equals sign.
featureTrim trailing whitespace from custom filenames when downloading ISOs, so the file extension is recognized correctly.
featureInclude Linux Kernel 7.x in the version range for the VM OS selector.
featureFix a typo in a translated OVMF-related error message.
securityFix a boot issue for Windows guests with Virtualization-based Security (VBS) enabled by disabling the cet-ibt and cet-ss CPU flags.
deprecatedSwitch from the deprecated block-job-complete to the newer job-complete QMP command.
breakingRemove redundant checks for USB hotplug support and unplug events during unrelated VM configuration changes.
deprecatedDeprecate and warn about raw cgroup v1 entries in the container configuration. The support for cgroup v1 will be removed in a future release.
securityPrevent local "copy.fail" privilege escalation exploit via AF_ALG sockets within containers by using seccomp filtering (PSA-2026-00018-1). If AF_ALG support is required in a specific container, see the security advisory forum post for more details.
deprecatedSwitch from the deprecated /etc/timezone to the recommended timedatectl to initialize the containers timezone setting (issue 7175).
deprecatedDeprecate the legacy starttime and dow parameters of the backup job API in favor of schedule. The legacy parameters were superseded by schedule since Proxmox VE 7.1 and have now been removed from the API response.
breakingWindows VMs using machine versions 11.0 or 11.0+pve1 are potentially affected by this issue. Such guests may have been created with the packages available in the Proxmox VE 9.2 ISO or qemu-server older than 9.2.0. Upgrading the qemu-server package and setting the machine version to 11.0+pve2 or…
breakingWindows VMs using machine version 11.0+pve2 or newer are not affected by this issue. Under qemu-server 9.2.0 or later, new Windows VMs are created with an unaffected machine version.
breakingWindows VMs using machine versions older than 11.0 are not affected if using qemu-server 9.2.0 or newer.
+143 more items in the release notes9.1.19 May 20, 2026
otherui: sdn: fabrics: wireguard: present the endpoint port as a separate field in the node edit window, defaulting to the standard WireGuard port 51820, rather than expecting a host:port value in a single endpoint field.
fixui: sdn: fabrics: fix an error when adding a route redistribution rule.
9.1.18 May 19, 2026
otherui: VM CPU flag editor: present the active acceleration as a 'Showing flags for KVM/TCG' label in the flag grid's bottom toolbar, replacing the permanently-visible hint that previously sat below the grid. Also fix scrolling glitches that could leave rows partially rendered, and make the CPU flags…
othercustom CPU models: reject create and edit requests that omit the base reported model, which is structurally required.
otherui: ceph osd: show the dm-crypt encryption status in the OSD details modal; the underlying OSD details endpoint now reports it too.
fixapi: ceph fs: expose the CLI handler for destroying a CephFS also a REST endpoint. Currently this still not exposed in the web UI. Also return all data pools and pool IDs in the filesystem listing, and fix a parameter name on the early add-storage check during create.
fixapi: ceph: broad return-schema correctness pass across the OSD, pool, monitor, manager, MDS, configuration, and node indexes: emit real JSON booleans for flags previously rendered as strings, declare missing return fields with property descriptions, drop a dead duplicated permissions key, omit the…
otherui: sdn: vnet edit: mark the tag field as required for zones that need it, disable rather than hide fields that do not apply for the chosen zone type, and explicitly delete fields that are no longer applicable upon submission.
fixui: sdn: route map and prefix list edit: fix alignment of value cells in the add/edit dialog, use a more consistent style for the match/set grid, make ID and order required, and add online help links.
fixsdn: fabrics: fix populating the WireGuard node 'Allowed IPs' field from existing config.
fixui: lxc create wizard: fix recent regression with the default rootfs disk being missing on fresh wizard opens.
otherui: wizard: increase wizard dimensions from 720x540 to 760x570 to give denser panels like the CPU flag list editor more room while keeping the 4:3 ratio.
otherui: datacenter menu: drop the 'guest resource' grouping and clean up the item list.
featureui: ceph wizard: drop the preview marker for Ceph Tentacle, it's the new stable default.
otherpve8to9: avoid logging a failure when the old kernel metapackages are no longer installed.
9.1.17 May 18, 2026
othernetwork-interface-pinning: write '.link' files with the product-neutral '50-pmx-' prefix and remove legacy '50-pve-' siblings on write, so they no longer collide with installer-written entries.
9.1.16 May 18, 2026
fixfix #6819: storage content view: handle the new 'approximate-size' field returned for inactive qcow2 LVs on LVM by rendering them with a leading '~' marker in the Size column, falling back to 'Unknown' when neither exact nor approximate size is set. Size column sorting remains numeric.
fixpve8to9: accept Proxmox kernels 7.0 and 6.17 as suitable in the upgraded-host checks, matching the default kernel switch in PVE 9.1 (6.17) and the upcoming switch to 7.0. Also fix the X.Y-pve fallback comparison that wrongly rejected 7.0-pve, and reduce noise from per-candidate not-installed probes.
featureui: sdn: improve UX for the wireguard interface dialogs: skip the delete-confirmation prompt for not-yet-saved entries, avoid a brief flicker when opening dialogs, and improve the empty state of the node-edit dialog when no interfaces have been added yet.
featureui: sdn fabric: add onlineHelp links to the node-edit dialogs.
featureui: sdn: route map panel: add 'tag' as a match statement, accepting integer tag values from 0 (matching untagged routes) up to 2^32-1, in line with FRR's 'match tag' clause.
otherd/control: depend on proxmox-enterprise-support-keyring to ensure the Proxmox support keyrings are available (in deactivated state) on PVE installations.
9.1.15 May 18, 2026
featureui: cpu models: add a new Datacenter > Custom CPU Models panel for cluster-wide CRUD of custom CPU model definitions: base model, vendor, physical address bits, hide-hypervisor, Hyper-V vendor ID, and per-flag toggles. Access is gated by Mapping.{Audit,Use,Modify} on /mapping/cpu/; assigning a…
featureui: cpu flags: add a flag editor grid used by both the new custom CPU model dialog (full view, with free-text search over name and description, an accel kvm/tcg selector, and a per-node multi-select filter) and the VM Processor edit dialog (restricted to the flags that may be set per VM). Flags…
featureui: vm processor edit: list custom CPU models alongside built-ins in the type selector, allow filtering out PVE-internal abstract profiles (x86-64-v2/v3/v4/v2-AES), and align the custom-CPU permission warning with the new Mapping ACL.
otherapi: capabilities: advertise the qemu/cpu-flags subroute in the qemu capabilities index so pvesh and other tree-walkers see it.
featureui: sdn: add support for the new BGP fabric protocol, configuring eBGP unnumbered peering with per-node ASN, optional BFD, prefix-list route filters, route maps, and redistribution. The interface panel omits the IP column since unnumbered interfaces carry no IPs.
otherui: ha: crs: auto-load the auto-rebalance settings dialog when opened from the HA status panel; previously it opened with blank fields and a Save would have overwritten the live config. Also display the hold- duration default via defaultText to match the other fields.
fixfix #7599: ui: vm create wizard: defer the first disk addition until the initial nodename is set, so adding a second CD-ROM drive for Windows virtio drivers correctly switches the disk controller from IDE to SCSI.
fixfix #3936: ui: storage: zfs: validate the blocksize field at form-edit time, enforcing a power-of-two between 512 bytes and 16 MiB with an optional 'k' or 'm' suffix.
9.1.14 May 16, 2026
fixfix #5076: ui: dc: add an optional 'audiences' field for OpenID realms, allowing the additional OIDC audiences a token may carry to be accepted.
othersdn: wireguard: stop disabling the name field when creating an external node, which had blocked external WireGuard node creation entirely.
othernetwork: drop the apply flag when generating the WireGuard config, avoiding an error when applying a configuration with newly created interfaces.
fixsdn: wireguard: fix rendering the peer list in Chromium-based browsers, which previously only worked in Firefox due to a race between setting available and selected peers.
featureui: ha: configure the CRS auto-rebalance imbalance threshold and minimum improvement margin in percent (0-100) to match the percent representation already used in the HA panel status. NOTE: previously configured fractional values must be multiplied by 100 to keep the same behavior; this only…
featureui: ha: add a CRS Settings shortcut button to the HA panel toolbar that opens the existing scheduling settings dialog directly, to improve discoverability without duplicating the settings tree.
9.1.13 May 15, 2026
otherapi: hardware: pci: use NVML for querying mediated device information on NVIDIA GPUs, exposing details that the standard sysfs mdev interface does not surface.
featurenode config: add an optional 'location' property holding a name and a latitude/longitude pair, settable per node. Lets management systems like Proxmox Datacenter Manager query and display a host's geographic position, for example on a world map, with per-node overrides on top of the cluster-wide…
featureui: expose the new 'Location' option in both the datacenter and node option views, using the location edit widget and renderer from the widget toolkit.
featureui: ha: resources: add an 'Auto-Rebalance' per-resource flag (default on) that controls whether an HA resource may be migrated during automatic rebalancing, with a matching grid column and status entry.
fixfix ui: sdn: evpn and bgp controller: do not send empty 'route-map-in' or 'route-map-out' values on create, which previously made creating a BGP or EVPN controller without any route map fail.
otherceph: switch the default release for fresh installs from Squid (19.2) to Tentacle (20.2) and drop its experimental gating. Existing clusters are unaffected, as the install wizard's cluster-version probe overrides the default with whatever release the cluster already runs; only the pre-selection on…
othersubscription: adapt to multiple server ID candidates: reuse an existing recorded server ID if it still matches one of the candidates, otherwise fall back to the first candidate. Keeps subscription handling working on hosts where the server ID identification can produce more than one value.
featuretighten qemu-server to >= 9.1.11 for the improved mdev support, libpve-rs-perl to >= 0.14.0 for the new subscription server-ID handling, proxmox-widget-toolkit to >= 5.2.1 for the location edit widget and renderer, and libpve-network-perl and libpve-network-api-perl to >= 1.5.1.
9.1.12 May 15, 2026
breakingui: sdn: fabrics: add management UI for the new WireGuard fabric protocol. New panels under Datacenter > SDN > Fabrics let users create and edit WireGuard interfaces with their peer references on internal nodes, manage external peer definitions, and review per-node available peers. Public keys,…
featureui: sdn: fabrics: ospf: add a per-interface network-type selector (Broadcast, NonBroadcast, PointToPoint, PointToMultipoint), exposing the new fabric API field. Previously the network type was inferred implicitly from whether the interface had an IP, leaving users no way to override it.
featureui: sdn: fabrics: ospf: add a redistribution grid for importing routes from other protocols (connected, kernel, static, ...) into OSPF, with a route-map selector per source.
featureui: sdn: evpn: zone and controller: expose new advanced fields (peer-group-name, nodes, BGP mode, eBGP multihop on the controller; additional controllers on the zone) to the UI.
otherui: always load SDN navigation entries. Previously they were hidden behind a tech-preview gate that rejected the dynamic feature probe when any optional SDN module was not yet available on the cluster, which has not been the intended behaviour for a while now.
fixui: fix parsing of property-strings when values contain an equals sign. The previous logic relied on String.split's limit parameter, which silently truncated values rather than stopping the split, so base64-padded values and similar got cut off at the first =.
othernetwork: sdn: trigger WireGuard config generation on apply, which emits per-interface configuration into /etc/wireguard/proxmox and syncs running interfaces via wg(8) syncconf if wireguard-tools is installed.
featureui: lxc: mountpoint edit: expose the new idmap option for mapping user/group IDs on a per-mountpoint basis, and drop a duplicate mp assignment in the same panel.
featureui: ha: add a button on a HA-managed guest's resource grid to disarm/re-arm it without removing the HA configuration, useful for temporarily skipping HA management during maintenance.
otherui: migrate: display the precondition messages for HA node-affinity rules when they constrain the migration target, so users see why a specific node cannot be picked.
otherui: sdn: title-case existing button and field labels for consistency with the rest of the UI.
featuretighten libpve-network-perl and libpve-network-api-perl dependencies to 1.5.0 and pve-container to 6.1.6 for the new WireGuard fabric, the OSPF redistribute and network-type API surface, and the LXC idmap option.
9.1.11 May 12, 2026
featureui: sdn: introduce management UI for the new prefix list and route map configuration entities. Adds dedicated panels under Datacenter > SDN for creating, editing, and removing prefix lists and route map entries, with explicit sequence numbers for prefix list entries and full match/set/exit-action…
featureui: qemu: wizard: re-add media=cdrom for the optional second VirtIO drivers ISO. The recent OS-type panel split lost the onGetValues hook that appended this on creation, which made adding the secondary ISO fail for Windows guests.
featureui: add default pgettext() and npgettext() implementations to the index template, avoiding UI breakage when no language file has been loaded yet. These functions are required for the context-aware translations support recently added to the proxmox-i18n tooling.
9.1.9 Apr 21, 2026
otherui: ha: status: handle the 'fencing' entry when ordering the grid, so it no longer bounces around between API requests on some browsers. Place it directly after 'quorum' for quick visibility.
fixapi: apt package versions: fix typo in libpve-notify-perl package name, which caused the package to be missing from the versions list.
fixfix #6234: ui: ceph: make the CephFS page scrollable along the Y-axis, so entries stay reachable on clusters with multiple MDS.
otherapi: vnc/termproxy: bind VNC and SPICE tickets to the listen port to harden authentication for interactive console sessions.
otherapi: vncproxy: always use a freshly generated password when authenticating via the VNC protocol, improving entropy compared to the previous ticket-derived scheme.
otherapi: termproxy: pin the accepted ticket in the spawned termproxy process as an additional defense-in-depth measure.
featuresdn: add a dry-run diff view to the SDN apply action, showing the upcoming FRR and ifupdown2 configuration changes before the user commits them.
otherupdate shipped appliance info index.
9.1.8 Apr 2, 2026
featureui: datacenter options: add dynamic load scheduler and auto rebalancing configuration for HA cluster resource scheduling, including threshold, hold duration, margin, and method settings.
deprecatedapi: backup: deprecate the legacy 'starttime' and 'dow' parameters in favor of 'schedule' and drop them from the API response, as they have been superseded since PVE 7.1.
featureapi: backup: add return schema for backup job endpoints.
othersystem report: adapt to ZFS 2.4.0 renaming arcstat to zarcstat.
9.1.7 Mar 27, 2026
otherui: qga: rename freeze-fs-on-backup checkbox to freeze-fs, reflecting that filesystem freeze/thaw now also applies to snapshots and replication, not just backups.
otherui: qemu: hardware: efi: suggest enrolling UEFI 2023 certificates from Microsoft when pre-enrolled keys are present but the 2023 certs are missing, as the 2011 certificates expire mid-2026.
deprecatedfix #7175: replace deprecated /etc/timezone handling with systemd timedatectl.
fixfix #7337: ui: preserve deep link hash on OpenID login redirect, so users are directed to the intended page after authentication.
fixceph: osd: fix bootstrap keyring creation when auth_client_required is not set in ceph.conf, defaulting to 'cephx' to match Ceph's own default.
fixfix #7011: ceph monitor: set ownership of monitor logs to ceph:ceph after creation, so logging works on freshly set up clusters without waiting for a ceph-common upgrade.
fixfix #7386: ui: vm memory: fix compatibility with Firefox ESR 115 by avoiding ES2025 Iterator.toArray, as we target ES2024 for the Trixie based releases.
fixfix #7191: ui: correctly sort TFA column in the PVE user list.
featureapi: cluster resources: add missing 'shared'-storage flag to return schema, required by the proxmox-datacenter backend.
otherui: download iso: trim filename to correctly detect file extension when a custom filename has trailing spaces.
fixui: ceph: fix pool edit dialog sometimes showing incorrect size and min_size values due to a race condition, which could lead to unintended replication setting changes on save.
fixui: ceph: osd: fix toolbar overflow on small screens by enabling horizontal scrolling.
fixfix #7300: ui: acl: include pre-generated SDN zones and fabrics in the permission path selector.
9.1.6 Feb 12, 2026
featureui: lxc/MPEdit: add "keepattrs" flag
9.1.5 Jan 27, 2026
otherui: display: update 'live-migration with VNC-clipboard not working' note.
otherpveceph setup: warn if experimental release is selected with (default) enterprise repo.
otherpveceph setup: prompt switch from enterprise to test repo for experimental release.
featureceph: add Ceph 20.2 Tentacle as available (preview) release.
fixfix #7149: ui: user create: do not leak changing the realm for a new user into the pre-selected realm of the currently logged in user, as that might cause some UX friction and confusion on their next login.
otherui: fully reset UI state on automatic logout due to stale ticket (e.g., after resuming a computer from longer suspend), as just showing the login mask on top of the current state might be a bit confusing.
fixui: utils: fix OVMF typo in error message translation.
otherupdate shipped appliance info index to current CDN state.
fixfix #7229: bulk actions: refresh pmxcfs infos between processing each guest to ensure any changes in-between, like from a hook script, are visible for successive starts.
otherhttp server: unify error message in case of authentication failure due to wrong credentials.
otherui: resource tree: don't show empty grouping nodes as expandable.
otherui: resource tree: show nested pools as actual child nodes of their parent pool and in turn drop rendering their parent path prefix.
9.1.4 Dec 22, 2025
otherapi: apt changelog: check for odd package name and ensure arguments are separated from options.
9.1.3 Dec 12, 2025
fixui: ceph install wizard: fix typo.
featureclose #6209: ui: allow creating snapshots and backups from the context menu.
featureui: improve some translatable strings and add some context for translators.
otherui: bulk actions: don't try to reset non-existing 'vmidfilter', which would cause an error in the browser console.
otherd/postinst: drop now obsolete apt-auth.conf migration. It was required after upgrading from Proxmox VE 7 to 8. A direct upgrade from Proxmox VE 7 to 9 is not possible, so it's obsolete.
fixfix #7125: ui: fix loading network section in folder view. Navigating to the 'Network' section would fail with a browser error, because of a missing reference to the documentation.
otherpve-sdn-commit: run for vlan/qinq zones on non-vlan-aware bridges. When using non-vlan-aware bridges for the VLAN or QinQ zones, it is necessary to regenerate the SDN configuration when the name of the physical NIC might have changed. In particular, this fixes issues in combination with pinning…
deprecatedapi: workaround broken 'maxworkers' alias in bulk actions api calls. For the new, cluster-wide bulk actions, only the 'max-workers' spelling would have an effect. For the pre-existing node-specific bulk migration, an error would occur when specifying the deprecated 'maxworkers' spelling, causing…
otherui: storage oci pull: optimize regular expression for the reference to avoid catastrophic backtracking potentially causing hangs in the dialog window.
9.1.2 Nov 29, 2025
otherpve8to9: improve message for TLS checks in relation to different key bit size for RSA or ECC based keys.
breakingfix #2077: pvenode: drop dependency on GNU readline Perl module in favor of our own PTY module. While it's less flexible, it's much simpler and robust, and–more importantly–it has no issues with being instantiated more than once, which recently became an error in the readline module, breaking EAB…
otherapi: bulk actions: use kebab-case for 'max-workers' parameter with alias to old 'maxworkers' spelling for backwards compatibility.
otherapi: cluster bulk actions: fall-back to datacenter.cfg for max-workers.
otherapi: cluster bulk actions: increase default worker from 1 to 4 for start, stop & suspend actions.
otherapi: cluster bulk actions: define minimum of 1 and a maximum of 64 for max-workers parameter.
featureapi: node bulk action: add max-worker parameter to stop and suspend actions to allow overriding through API.
otherapi: node bulk action: improve the cpu-thread-count derived max-worker fallback, which is used when neither an API parameter nor an max_worker setting in the datacenter config is set. Ensure that there is always one core left over for the system and use maximum of 8 workers.
featureapi: node bulk start: implement concurrent workers and add max-worker API parameter.
otherapi: node bulk migrate: set maximum of max-worker parameter to 64.
otherui: bulk action window: give box-label hint for force-stop checkbox more space.
featureui: bulk action window: add max-workers field to all actions.
otherui: bulk action window: adapt to lowered upper-limit for migrate max-worker.
otherpveupdate: do not try to update subscription when using offline key.
9.1.1 Nov 18, 2025
featureui: storage: oci registry pull: make parsing the reference of a OCI image URL more robust and add a validator to the reference field for better immediate feedback to the user.
otherui: storage oci pull: reword empty text for tag field to avoid suggesting that this placeholder is the default value, as we currently do not have any here.
featureLatest 6.17.2-1 Kernel as new stable default
featureCreate LXC containers from OCI images. Open Container Initiative (OCI) images are a popular format for distributing templates for system or application containers. OCI images can now be uploaded manually or downloaded from image registries, and then be used as templates for LXC containers. This…
featureSupport for TPM state in qcow2 format. Some VM guest workloads require attaching a virtual Trusted Platform Module (TPM), for example newer Windows guests. The state of a virtual TPM can now be stored in the qcow2 format. This allows taking snapshots of VMs with a TPM state on file-level storages…
featureFine-grained control of nested virtualization for VM guests. Some VM guest workloads need access to the host CPU's virtualization extensions for nested virtualization. Examples are nested hypervisors or Windows guests with Virtualization-based Security enabled. A new vCPU flag allows to enable…
featureMore detailed status reporting for the Software-Defined Networking (SDN) stack in the GUI. Local bridges and VNets report the currently connected guests. EVPN zones additionally report the learned IPs and MAC addresses. Fabrics are now part of the resource tree and report routes, neighbors, and…
featureKernel 6.17 as new stable default.
featureSeamless upgrade from Proxmox VE 8.4, see Upgrade from 8 to 9.
featureAllow to initiate bulk actions directly from the Tag View. The Tag View provides a convenient overview over virtual guests, grouped according to their assigned tags. Right-clicking on a tag in the resource tree now allows to conveniently initiate bulk actions for virtual guests with that tag.
featureRight-clicking on a VM in the resource tree now allows to reset the VM (issue 4248).
featureImprovements to the new mobile web interface introduced in Proxmox VE 9.0:
featureSupport login using an OpenID Connect (OIDC) realm.
featureThe VM hardware and option panels now show pending changes.
featureAllow to edit VM options directly from the mobile web interface.
featureImprove detection of mobile Firefox (issue 6657).
featureFix an issue where the consent banner was not rendered as Markdown.
featureMove the global search bar to the middle of the screen and adapt to the screen size for improved visibility.
featureUse icons that are more suitable for high-resolution display (issue 6599).
featureIncrease the thresholds for warning about high memory usage for the cluster, node, and guest summary pages.
featureFix an issue where no login dialog would be shown after a session has expired.
featureFix an issue where resource pool members would not be displayed correctly after adding or removing a member (issue 6385).
featureFix performance issues where the GUI would be slowed down in setups with many guests.
featureThe datacenter, node, and guest summary pages now show two separate selectors for graph timeframe and aggregation type. Previously, both settings were combined into one dropdown box.
featureThe journal viewer now keeps the horizontal scrolling position even when refreshing the journal (issue 6679).
featureFix an issue where APT changelogs or package descriptions with non-ASCII characters would be displayed incorrectly.
featureClarify that the graphs in the storage summary show usage in bytes.
featureFix an issue where the first guest would not update its status in the resource tree for five minutes after creation.
featureAllow filtering for name, node or VMID when adding guests to a resource pool.
featureFix an issue where certain setting dialogs, available only to highly-privileged users by default, were susceptible to XSS (PSA-2025-00013-1).
featureFix an issue where the task description of some task types would be incomplete.
featureFix a regression where the resource tree tags would not have the correct color (issue 6815).
featureAdd some missing links to the online documentation (issue 6443).
featureUpdated translations, among others:
featureCzech
featureFrench
featureGeorgian
securityFine-grained control of nested virtualization for VM guests. Some VM guest workloads need access to the host CPU's virtualization extensions for nested virtualization. Examples are nested hypervisors or Windows guests with Virtualization-based Security enabled. The host CPU type makes all CPU…
breakingRemove notice marking AMD SEV-ES and SEV-SNP as highly experimental.
breakingRemove the computed and obsolete group field from the service status data.
breakingRemove obsolete checks and warnings concerning RRD migration.
deprecatedrrdtool is rebuilt to provide a native systemd unit file. The ListenStream directive was updated to not print a deprecation warning by using /run as directory for the socket.
+150 more items in the release notes9.0.18 Nov 18, 2025
fixui: resource tree: fix rendering of guest text when sorted by name.
fixui: fix recent regression from wrongly rendering guest entries in the tag view.
featureui: console: add a simple heuristic to detect application containers and show a warning for them in the console view, as the console for such containers is (currently) likely not fully functional.
9.0.17 Nov 17, 2025
featureui: lxc: options: make sure values of recently added properties are html-encoded.
fixui: lxc options: fix rendering default value tty count in edit window.
fixfix: ui: trim leading and trailing white space from OCI registry reference for convenience.
otherui: qemu: stop marking SEV-ES and SEV-SNP options as experimental.
otherui: sdn: improve naming of vm network device column in bridge view.
featureui: qemu tdx: add support for configuring TDX attestation.
fixui: resource tree: fix timing race where rendered clustername in root-node could seemingly vanish.
otherui: lxc: support configuring empty environment variables.
fixnetwork-interface-pinning: fix creating directory when '/usr/local/lib' does not exist.
otherui: create wizard: only submit ha-managed if checked for better compatibility with other nodes that are still running a slightly older package version set.
featureui: storage: oci registry pull: add filename field to allow overriding the default one.
featureui: add worker task type description mappings for cluster-wide bulk actions.
9.0.16 Nov 16, 2025
featureapi: add endpoint to query OCI registries for the tags (versions) of an image.
featureui: template view: add OCI registry pull dialog.
featureui: lxc: add support to edit container runtime environment. The new environment management provides a convenient way to change the containers runtime environment. Some container (OCI) images support basic configuration through the environment.
otherui: lxc network: support advanced host-managed option for containers where the network is setup on start directly by the host, avoiding the need for any network management stack inside the CT.
featureui: lxc options: add support for init command entrypoint. Custom container images or OCI images might want to adapt the initial command that gets executed as entry point on container start. For system containers this is /sbin/init, which quite often points to systemd. Most OCI application images…
featureui: provide a context menu for the datacenter node in the main resource tree providing central access to the new cluster-wide bulk-actions for guests.
featureui: provide a context menu for the tag nodes in the main resource tree if the "Tag View" is selected. This allows one to conveniently execute bulk actions for all guests that have a specific tag.
9.0.15 Nov 15, 2025
otherui: ip view: ensure container is fully initialized before store update.
9.0.14 Nov 15, 2025
fixfix creating worker task log file for new cluster-wide bulk migrations.
otherui: container: show dynamically assigned IPs in network tab.
otherui: reuse IP overview from VMs for container and show it in the CT summary view.
featureui: summary view: increase row height to ensure there's enough space by default for new IP overview. This results in the RRD metrics charts to have 250px height for the actual data.
9.0.13 Nov 14, 2025
featureui: qemu options: add support to configure Intel TDX for confidential computing (similar to AMD SEV).
otherui: ha: do not show legacy HA group info in guest status view, as groups got replaced with the more flexible HA Affinity-Rules in Proxmox VE 9.
otherui: qemu: tpm drive: non-raw image formats are now supported for TPM state drives.
featurerrd metrics: always prefer new-format keys over old-format keys to avoid artificially delaying showing the current status of a VM/CT on a fresh cluster.
featureapi: termproxy, vncwebsocket: allow one to using API tokens, the user still needs a local PAM login to use the shell.
other8to9: drop warnings specific to now outdated RRD migration tool.
featureapi: implement node-independent cluster wide guest bulk actions like start, stop, migrate or suspend.
featureui: add guest bulk actions menu at the right side of the datacenter level top bar.
otherapi: metric export: reuse credentials from request for proxying.
featureui: ha resource removal: allow one to purge resource from all rules.
featureVM and CT create wizard: add checkbox for creating HA resource upon VM creation.
featureui: restore: add checkbox for adding HA resource upon restore of a guest backup.
otherui: ha: rules: make status icon unclickable if there are no errors.
otherui: replace Proxmox logo with slightly larger SVG version for better and crisper scaling on HiDPI displays.
otherui: workspace: move global search bar in the middle and make it flexible to better use available space in the top bar.
9.0.12 Nov 14, 2025
fixfix #6815: ui: resource tree: update tag colors properly.
fixfix #6779: daily update: renew already expired certificates, e.g. for when nodes are offline for a longer period of time.
fixfix #6897: ui: add online help reference for LXC container feature edit window.
otherui: properly reset API 401 count to avoid rare edge case where there is no login mask shown after having been logged out (e.g. expired ticket).
featureapi: apt: add 'all' variant to architecture property.
otherapi: apt: correctly encode fields from available updates as utf8.
fixfix #6443: ui: improve online help for VM State storage.
breakingui: ha: remove default focus from VM/CT dropdown in resource edit window to avoid opening the picker immediately when opening the window.
featureha: do not allow an empty VM/CT dropdown in resource edit window.
fixfix #6932: api: acme: add digest and plugin to return schema.
otherui: VM cpu flag selector: query CPU flag list via API.
otherstatus: rrd metrics: always use pve-node-9.0 data format path and drop RRD metrics format migration on upgrade as we now transparently read from the old file if a time-frame falls under the old file(s).
featureapi: nodes: use new status module for sdn subdirectory.
featurepvestatd: add network resource to status reporting.
featureapi: cluster: add support for network resource type.
featureui: resource tree: add network resource.
otherui: network browser:
featureadd ip-vrf panel for evpn zones.
featureadd mac vrf panel.
featureadd zone bridge view.
featureui: sdn: status view: adapt to new network resource.
9.0.11 Oct 6, 2025
featureclose #4248: ui: Add Reset button to right click context menu of virtual machines, like available in the resource tree or the global search result.
breakingui: guest snapshot: remove excess '}' at the end of window title
fixfix #5244 pveceph: install: add new 'manual' repository option, which, for example, can be useful for offline installation
featureui: ceph install wizard: add option and hint for 'manual' repository for, e.g., offline installation through a Proxmox Offline Mirror managed repository.
fixfix typo in ifupdown2 version error message.
otherupdate shipped appliance info index.