Pvewarden – let an AI agent patch Proxmox VMs without giving it a shell (github.com)

Pvewarden is a new AI-driven tool designed to automate the patching of Proxmox Virtual Environment (VE) guests while prioritizing security. With capabilities to check for pending updates, create snapshots, install updates, and verify services, Pvewarden operates without direct shell access, ensuring that it only interacts with a restricted set of tools based on specific tags set by the user. This significant enhancement allows administrators to maintain up-to-date virtual machines and containers while minimizing risk, as unauthorized operations are effectively blocked. Currently in its early stages of development and already in use, Pvewarden has been tested on Proxmox VE 9 with Debian and Ubuntu guests. It employs a unique security model that guarantees each guest operates with limited permissions, utilizing a unique SSH key for each instance to prevent cross-guest exploitation. Moreover, it logs all actions for audit purposes, ensuring transparency in its operations. This controlled patch management strategy is particularly relevant for organizations looking to leverage AI for system maintenance without compromising security, making Pvewarden a notable advancement in AI-assisted infrastructure management.