[PVE-User] install pve-enterprise (with subscription key) on top of debian install

[Gilou]

Le 16/10/2025 à 12:05, DERUMIER, Alexandre via pve-user a écrit :
> Hi,
> 
> I'm currently working on a hardened pve installation for CIS
> certification, and as it need luks encryption + specific partionning,
> I need to install it on top of a debian install.
> 
> I would like to deploy pve-enterprise repo directly, but how can I do
> it on top of debian ?
> 
> The wiki said to install no-subscription first, then switch to
> enteprise after uploading the key in the gui
> https://pve.proxmox.com/wiki/Install_Proxmox_VE_on_Debian_12_Bookworm
> 
> But that mean than more recent packages could be pushed from no-
> subscription first.
> 
> Is is possible to put the key somewhere in/etc/apt/ ?
> 
> Alexandre

Hi,

It's been a while since I've had to do such things.. but here goes..

Unless you have an offline key, you'll need to register the server 
first, so that the server ID (hex version of the md5 hash of the SSH RSA 
key) is allowed.
Basically, as you can see in proxmox-subscription/src/check.rs:
you need to call:
https://shop.proxmox.com/modules/servers/licensing/verify.php
with that JSON (challenge is epoch time + random string) :
{
         "licensekey": key,
         "dir": server_id,
         "domain": "www.proxmox.com",
         "ip": "localhost",
         "check_token": challenge,
}

Then either you re-register/check it once you have the API available, or 
you try to write a valid /etc/subscription file..

Otherwise, it's "simple", you can get the info on a running server:
/etc/apt/auth.conf.d/pve.conf
machine enterprise.proxmox.com/debian/pve
login server_id
password server_key

Set the proper enterprise repos, and it should work, if the server ID is 
registered...

This might be interesting to have in the ansible role lae.proxmox (that 
you'll probably despise, given your love for ansible HAHA) as well, as 
the only supported scenario for now there is to.. remove the enterprise 
repos.. either have a curl command to register the server id and compute 
/etc/subscription, or a tool (pvesubscription) to wrap that Rust API in 
Debian..


Cheers,
Gilou