Le 16/10/2025 à 12:05, DERUMIER, Alexandre via pve-user a écrit :
Hi,
I'm currently working on a hardened pve installation for CIS
certification, and as it need luks encryption + specific partionning,
I need to install it on top of a debian install.
I would like to deploy pve-enterprise repo directly, but how can I do
it on top of debian ?
The wiki said to install no-subscription first, then switch to
enteprise after uploading the key in the gui
https://pve.proxmox.com/wiki/Install_Proxmox_VE_on_Debian_12_Bookworm
But that mean than more recent packages could be pushed from no-
subscription first.
Is is possible to put the key somewhere in/etc/apt/ ?
Alexandre
Hi,
It's been a while since I've had to do such things.. but here goes..
Unless you have an offline key, you'll need to register the server
first, so that the server ID (hex version of the md5 hash of the SSH RSA
key) is allowed.
Basically, as you can see in proxmox-subscription/src/check.rs:
you need to call:
https://shop.proxmox.com/modules/servers/licensing/verify.php
with that JSON (challenge is epoch time + random string) :
{
"licensekey": key,
"dir": server_id,
"domain": "www.proxmox.com",
"ip": "localhost",
"check_token": challenge,
}
Then either you re-register/check it once you have the API available, or
you try to write a valid /etc/subscription file..
Otherwise, it's "simple", you can get the info on a running server:
/etc/apt/auth.conf.d/pve.conf
machine enterprise.proxmox.com/debian/pve
login server_id
password server_key
Set the proper enterprise repos, and it should work, if the server ID is
registered...
This might be interesting to have in the ansible role lae.proxmox (that
you'll probably despise, given your love for ansible HAHA) as well, as
the only supported scenario for now there is to.. remove the enterprise
repos.. either have a curl command to register the server id and compute
/etc/subscription, or a tool (pvesubscription) to wrap that Rust API in
Debian..
Cheers,
Gilou
_______________________________________________
pve-user mailing list
[email protected]
https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-user
