Back to Blog
Proxmox
VE
Release
Kernel
LXC
TPM
SDN
Upgrade
Proxmox VE 9.1 is Here: What's New, What's Better, and What to Watch Out For
November 19, 2025
16 min read read
The latest version of Proxmox VE is officially out, and version 9.1 isn't just a maintenance release—it's a statement. Proxmox VE 9.1 is packed with meaningful improvements, a few quiet game-changers, and some caution signs you'll want to pay attention to if you're running it in production. Built on Debian 13.2 "Trixie" and shipping with the Linux Kernel 6.17.2 by default, this release tightens the bolts on nearly every layer of the virtualization stack.
Here's what's actually worth knowing about the update—and how it might affect your setups, workflows, and sanity.
## The Small Feature That Could: LXC from OCI Images
LXC containers can now be spun up directly from OCI images, which might not sound sexy on the surface—but it's a big deal. The Open Container Initiative format has become the de facto way to distribute containers across ecosystems, and now you can use those same OCI images to generate full system containers within Proxmox. Whether you're pulling application images from a registry or uploading your own, this adds flexibility and aligns Proxmox more closely with container standards seen in tools like Podman and Docker.
There's even a tech preview for application containers built this way. If you've been juggling LXC templates and wishing for something a little more standardized, this is a welcome pivot.
## Virtual TPMs Get More Real
Trusted Platform Modules (TPMs) have been a sticking point for anyone running modern Windows guests or sensitive workloads. Proxmox VE 9.1 now supports storing TPM state in the qcow2 format. Why is this important? It lets you snapshot virtual machines that use a TPM—even if you're storing them on NFS or CIFS shares.
For users trying to bring Secure Boot or Windows 11 environments into their virtual clusters, this is the kind of behind-the-scenes infrastructure fix that removes headaches without making headlines.
## Nested Virtualization Just Got Smarter
Nested virtualization support is nothing new, but until now it was a bit of a sledgehammer approach. In 9.1, there's a new nested-virt flag that allows you to enable nested virtualization on vCPUs that mimic the host CPU's vendor and generation—without having to expose the entire host CPU.
That might sound like minutiae, but it gives you finer control. Want to run a hypervisor inside a guest? Or enable Microsoft's Virtualization-based Security (VBS) in Windows without exposing every single CPU flag to the VM? Now you can.
## SDN Gets a Real Status Update
Software-Defined Networking (SDN) in Proxmox has slowly matured, and the 9.1 update brings GUI visibility that admins have been screaming for. You can now see which guests are connected to which bridges and VNets. EVPN zones even report learned IPs and MACs. That kind of visibility isn't just cosmetic—it makes troubleshooting a lot less painful.
Also, fabrics now show up in the resource tree with details like routes and interfaces. If you're running complex networking setups, this removes a big layer of guesswork.
## GUI Improvements That Actually Matter
Proxmox VE 9.1 also includes a decent batch of UI tweaks, most of which target quality of life rather than wow factor. You can now right-click tags to bulk manage groups of VMs. The mobile UI got a refresh with better Firefox detection, improved layout scaling, and login support via OpenID Connect. Icons are now high-DPI friendly, and memory usage warnings have smarter thresholds.
It's clear the dev team is trying to make life easier without trying to reinvent the wheel. For once, these aren't just cosmetic updates—they solve real annoyances.
## Kernel 6.17: Fast, Powerful… and a Little Risky?
With the new kernel comes better performance, bug fixes, and extended hardware support. But also: problems.
There are already reports of issues when running kernel 6.17 on certain Dell PowerEdge servers, including machine check errors. If you're using NVIDIA's vGPU stack, bad news: the drivers aren't yet compatible with this kernel. The DRBD module also won't build properly against 6.17.
Workarounds? You'll need to manually pin kernel 6.14 and uninstall the default kernel headers. It's not rocket science, but it's not friction-free either. For mission-critical environments, this part of the upgrade deserves a pause and a plan.
## QEMU, ZFS, Ceph, and More: Under-the-Hood Wins
QEMU 10.1.2 brings better performance and stability, plus support for TPM in qcow2 format.
ZFS 2.3.4 and Ceph Squid 19.2.3 bring enhanced support, especially for newer Windows guests and modern workloads.
Proxmox now includes basic support for Intel TDX, marking a step into the confidential computing space. Windows doesn't yet support it, but the groundwork is being laid.
PCI passthrough also saw tweaks, like better handling of devices already bound to a VFIO driver. And you can now disable KSM (Kernel Samepage Merging) per-VM, which is a nice option when optimizing for performance instead of density.
## Datacenter-Level Bulk Actions
If you've ever wanted to restart or migrate a whole group of VMs across nodes without going one-by-one, Proxmox 9.1 finally delivers. Datacenter-level bulk actions now make it easy to apply operations to many guests at once. This is a long-requested feature and one that admins immediately began celebrating.
## What's Still in Tech Preview
There are a few things that are present but not yet polished:
Snapshots as volume chains: Useful but not fully baked.
App containers via OCI: Only partial support for now.
Static load scheduler for HA: Available but in preview.
Firewall upgrades using nftables: Promising but not fully stable.
Tread lightly with these until they graduate from preview status.
## Known Issues and Upgrade Advice
For anyone planning to upgrade from 9.0 or 8.4:
Backups first, always.
Use apt update && apt dist-upgrade or do it via the GUI.
Pin your kernel if you're relying on hardware or tools that don't play nice with 6.17.
Check the known issues and support forum for real-world feedback—because even the best changelogs miss stuff.
## Final Thoughts
Proxmox VE 9.1 doesn't reinvent the platform, but it does something arguably more important: it evolves it. It brings just the right mix of polish, performance, and practicality—especially for those running large clusters or juggling diverse workloads.
Sure, there are a few gotchas (hello kernel 6.17), but if you plan the upgrade right and pin what needs pinning, you'll likely walk away with a smoother, more powerful system.
And for long-time Proxmox users, this release feels like a nod to the community. It doesn't try to be flashy. It just makes your life easier.
Keep Exploring
Immich in Proxmox LXC: A Stability Gamble Worth Taking?
Running Immich in a Proxmox LXC container sounds elegant, but real-world experience reveals stability challenges. Here's what the community learned about LXC vs VM approaches.
Docker in LXC vs VMs on Proxmox: Why This Debate Refuses to Die in 2026
Docker in LXC or VM on Proxmox? Compare security, performance, backup behavior, and operational risk so you can pick the right model.
Running Clawdbot on Proxmox: A Practical Guide for Real Humans
How a Single Proxmox Node Became a Multi-Tenant Self-Service Cloud (Without Giving Anyone Root)
A deep dive into turning one Proxmox node into isolated per-project labs where teams self-manage VMs through the GUI—without root access and without seeing each other's resources.