Frequently Asked Question

Adding GENSupport to a proxmox host for Management by the HelpDesk
Last Updated 6 months ago

When we are managing a remote system, we need a user that we can login with to perform this function, and we DO NOT want to use the root password as is traditional in a basic proxmox installation. 

First we need to install some prerequisites that we need to be able to function correctly: 

apt install -y sudo net-tools iotop sysstat iftop btop htop traceroute mtr lsof strace lshw

The default username is gensupport, so it will need adding to each node as follows: 

adduser --gecos "GENSupport,,," gensupport


** SELECT A STRONG PASSWORD **

usermod -aG sudo gensupport

Now we'll add the role to proxmox

pveum role add GEN --privs "Datastore.Allocate,Datastore.AllocateSpace,Datastore.AllocateTemplate,Datastore.Audit,Group.Allocate,Mapping.Audit,Mapping.Modify,Mapping.Use,Permissions.Modify,Pool.Allocate,Pool.Audit,Realm.Allocate,Realm.AllocateUser,SDN.Allocate,SDN.Audit,SDN.Use,Sys.AccessNetwork,Sys.Audit,Sys.Console,Sys.Incoming,Sys.Modify,Sys.PowerMgmt,Sys.Syslog,User.Modify,VM.Allocate,VM.Audit,VM.Backup,VM.Clone,VM.Config.CDROM,VM.Config.CPU,VM.Config.Cloudinit,VM.Config.Disk,VM.Config.HWType,VM.Config.Memory,VM.Config.Network,VM.Config.Options,VM.Console,VM.Migrate,VM.PowerMgmt,VM.Snapshot,VM.Snapshot.Rollback"
pveum user add gensupport@pam
pveum aclmod / --roles GEN --users gensupport@pam

This concludes the setup for a PAM user on proxmox for GEN HelpDesk use. Be sure to communicate the strong password you selected above to the HelpDesk securely and we recommend this is done through your Account Manager. 

Proxmox support from the engineers who wrote this article

This article came out of a real case resolved by GEN engineers, not from upstream documentation. GEN have run Proxmox in production in our own UK data centres since 2015, and have been in enterprise IT for 37 years. If this one has not solved your problem, we can.

  • 30 minute response, 24 hours a day, every day of the year on critical production infrastructure.
  • No contracts. Buy hours, use hours. No minimum term and no notice period.
  • Genuinely independent. We hold no software partner status with Proxmox or any other vendor, so nothing we recommend is shaped by a licence margin.
  • UK based, in-house engineers. No outsourced first line.

Proxmox support  ·  VMware to Proxmox migration  ·  Proxmox training  ·  Support rates

Registering a GEN account is free, so the route to an engineer is open before you need it. You only ever pay for the time you use.

This website relies on temporary cookies to function, but no personal data is ever stored in the cookies.
OK
Powered by GEN UK CLEAN GREEN ENERGY

Loading ...