Proxmox

Network

Configure trunking on proxmox

# Physical interface
iface enp86s0 inet manual

# VLAN Bridge, native VLAN
auto vmbr0
iface vmbr0 inet manual
	bridge-ports enp86s0
	bridge-stp off
	bridge-fd 0
	bridge-vlan-aware yes
	bridge-vids 2-10

# VLAN 2
auto vmbr0.2
iface vmbr0.2 inet dhcp

# VLAN 4
auto vmbr0.4
iface vmbr0.4 inet dhcp

• systemctl restart networking

• or ifreload -a: restart interfaces

SSL Certificate using let's Encrypt

Step 1: Add ACME Account

• Navigate to Datacenter > ACME > Add to add a new ACME account. Provide a name for the account, a valid email address, and accept the terms of service.

• pvenode acme account register

Step 2: Request Let's Encrypt SSL Certificate

• Next, navigate to the Certificates section under your Proxmox hypervisor node. Select the ACME account you added earlier and add your Proxmox VE domain name as configured in your DNS server.

• pvenode config set --acme domains=

• Click on Order Certificates Now to request the SSL certificate. Alternatively, you can use the command line:

• pvenode acme cert order

Step 3: Reload Proxmox VE Web Console

• Rreload your web browser to load the new certificate. You can verify the certificate details under the Certificates section.

Checking Services

• systemctl restart pveproxy pvedaemon pve-cluster

Troubleshooting

Doesn't see node in dashboard after deleting certificate:

• Fix be removing old certificate and regenerate

rm /etc/pve/local/pve-ssl.key
rm /etc/pve/local/pve-ssl.pem
pvecm updatecerts -f

User Management

• pveum user add shutdown-user@pve --email [email protected]

• pveum passwd shutdown-user@pve

• pveum user list

• pveum acl modify / -user shutdown-user@pve -role ShutdownRole

• pveum user token add $username@pve $token-name: generate api token for user

• pveum user token list $username@pve

• pveum user token modify $username@pve $token-name --privsep 0

  • privilege separation enabled: token need to be assigned a role

    • pveum acl modify /nodes/$node-name -token $username@pve!$token-name -role ShutdownRole

  • privilege separation disabled: token have the same privilege as user

• API call using Curl

curl -X POST "https://proxmox.domain.com/api2/json/nodes/proxmox/status" \
     -H "Authorization: PVEAPIToken=hass@pve\!Shutdown=4bf" \
     --data "command=shutdown" --insecure

curl -X GET "https://proxmox.domain.com/api2/json/nodes/proxmox/status" \
     -H "Authorization: PVEAPIToken=hass@pve\!Shutdown=493bf" \
     --insecure

Role Management

• pveum role add ShutdownRole -privs "Sys.PowerMgmt Sys.Audit"

• pveum role modify ShutdownRole -privs "Sys.PowerMgmt"

• pveum acl delete / -user @pve -role Sys.Audit

• pveum acl modify /nodes/ -user @pve -role ShutdownOnly

• pveum acl list

• pveum acl list

• systemctl restart pveproxy

• systemctl restart pvedaemon

API

VM Management

• Get VM/Container Status

curl -k -X GET "https://proxmox.domain.com/api2/json/nodes/proxmox/qemu/104/status/current" \
     -H "Authorization: PVEAPIToken=user@pve\!TokenName=d2543163" | jq .data.status

curl -k -X GET "https://proxmox.domain.com/api2/json/nodes/proxmox/lxc/109/status/current \
     -H "Authorization: PVEAPIToken=user@pve\!TokenName=d2543163" | jq.data.status

• Start VM

curl -k -X POST "https://proxmox.domain.com/api2/json/nodes/proxmox/qemu/104/status/start" \
     -H "Authorization: PVEAPIToken=user@pve\!TokenName=d2543163"

curl -k -X POST "https://proxmox.domain.com/api2/json/nodes/proxmox/lxc/104/status/start" \
     -H "Authorization: PVEAPIToken=user@pve\!TokenName=d2543163"

• Stop VM

curl -k -X POST "https://proxmox.domain.com/api2/json/nodes/proxmox/qemu/104/status/stop" \
     -H "Authorization: PVEAPIToken=user@pve\!TokenName=d2543163"
curl -k -X POST "https://proxmox.domain.com/api2/json/nodes/proxmox/lxc/104/status/stop" \
     -H "Authorization: PVEAPIToken=user@pve\!TokenName=d2543163"

• Shutdown VM

curl -k -X POST "https://proxmox.domain.com/api2/json/nodes/proxmox/qemu/104/status/shutdown" \
     -H "Authorization: PVEAPIToken=user@pve\!TokenName=d2543163"
curl -k -X POST "https://proxmox.domain.com/api2/json/nodes/proxmox/lxc/104/status/shutdown" \
     -H "Authorization: PVEAPIToken=user@pve\!TokenName=d2543163"

• Reboot VM

curl -k -X POST "https://proxmox.domain.com/api2/json/nodes/proxmox/qemu/104/status/reboot" \
     -H "Authorization: PVEAPIToken=user@pve\!TokenName=d2543163"
curl -k -X POST "https://proxmox.domain.com/api2/json/nodes/proxmox/lxc/104/status/reboot" \
     -H "Authorization: PVEAPIToken=user@pve\!TokenName=d2543163"

Reference

• Certificate Management

• Proxmox VE Community Script