Feature Status and Roadmap

Cloudmin 10 is developed in the open and is not released yet. This page lists what works today and what is still planned, so the rest of the documentation can be read in context. Items marked Planned are design targets, not available features.

Implemented

Host

• Automated installer for Rocky Linux 10, AlmaLinux 10, Debian 13 and Ubuntu 26.04 on x86-64 and ARM64, with repository setup, package groups, managed swap and a readiness report.
• Cloudmin-Config prepares KVM, modular or monolithic libvirt, a default storage pool, a persistent NAT network, EFI firmware, Webmin, nftables and Fail2ban, and boots an isolated KVM appliance to verify the host.
• Host readiness checks with actionable errors, shown on the overview.
• Direct libvirt discovery through Sys::Virt, without parsing virsh output.

Images

• Catalogue of AlmaLinux, Alpine, Arch, CentOS Stream, Debian, Fedora, openSUSE, Rocky Linux and Ubuntu cloud images for the host architecture, verified against the publishers’ SHA-256 or SHA-512 checksums.
• Background imports from HTTPS URLs, browser uploads and host files into directory, filesystem and NFS pools, with progress pages, batch downloads, bulk deletion and custom catalogue entries.
• Installer ISOs, with an empty system disk and the ISO in a read-only CD/DVD drive. Experimental.
• Image capture from an existing Linux guest, in Cloudmin Pro.

Virtual machines

• Creation from cloud images or ISOs with firmware selection, independent disks and recoverable jobs; cloud-init account setup, SSH keys, DHCP or static IPv4 and IPv6 including on-link gateways.
• Machine templates and resource plans, including Default Template, Default Plan and Virtualmin GPL and Pro templates.
• Guest packages and Virtualmin GPL/Pro installation run inside the guest after cloud-init. Preparation and final setup scripts require Cloudmin Pro. Pro
• Power controls, pause and resume, confirmed hard reset, autostart, live CPU and balloon memory changes, offline resource maximums and boot settings.
• Disk and network interface changes, disk growth, ISO insertion and ejection, and deletion with explicit disk selection and shared-storage checks.
• Guest password reset through the QEMU Guest Agent.
• Disk snapshots with creation, restore, deletion, per-machine history, a host overview and guest-agent preparation.
• Full clones from stopped or running guests with fresh identities, or unchanged copies left stopped.
• Full backups and restore with hourly to yearly schedules and retention, to local, SSH and S3 destinations, plus cloud destinations in Pro.

Access

• Browser SSH terminals with pinned host keys, host-managed per-guest keys, remembered ports and optional automatic connection.
• Serial consoles with recorded output replay and graphical VNC consoles that work during boot.
• Guest Webmin through the host’s Servers Index proxy for Virtualmin guests behind NAT, root-only and behind a trust warning.
• Delegation of individual virtual machines to Webmin users with separate grants; read-only mode blocks changes and consoles.
• Live status over authenticated WebSockets: power state, guest agent, SSH reachability, resource usage and guest filesystem usage.

Networking and storage

• NAT, routed and isolated virtual networks, and guided host bridge creation through NetworkManager, Netplan or ifupdown with connectivity confirmation and automatic rollback.
• Storage pool and volume inventory; directory, filesystem and NFS pools for creation, cloning, backups and imports; registered LVM volume groups and thin pools for creation, cloning, backups, restore and native snapshots, with raw guest disks.

Platform

• Durable jobs with reservations, progress, cancellation and recovery after a controller restart.
• One versioned JSON API shared by the UI, the api.pl command line and remote clients.
• Isolated systemd workers without root for downloads, inspection, seeds, consoles and relays.
• Compatibility wrappers for frame-based themes and older Cloudmin function names.

Planned

First supported release

• Clean-install validation across the full host matrix, including physical ARM64. Planned
• One fully tested shared storage path, such as NFS on every supported host. Planned
• VLAN tags on guest interfaces and anti-spoofing through libvirt network filters. Planned
• Scheduled snapshots. Planned
• Adopting guests defined outside Cloudmin. Planned
• Machine-readable API schema and generated API documentation. Planned
• Catalogue signature verification, an update schedule and an end-of-life policy. Planned
• Legacy Cloudmin 9 KVM import with a per-machine report, cutover and rollback. Planned
• A stable Cloudmin 10 package repository. Planned

Cloudmin Pro

• Projects, quotas, self-service creation, usage tracking and automation credentials. Planned

Cloudmin Connect GPL

Cloudmin Connect is a separate planned fleet product. GPL will add host registration, combined inventory and search, consoles and terminals, resource views, safe cold moves and host backup/restore actions. It will have host and fleet VM limits; the numbers are not decided. Existing guests remain visible and recoverable after a limit is exceeded. Planned

Cloudmin Connect Pro

• Live migration, evacuation and placement for tested host/storage combinations. Planned
• Controller quorum, verified fencing, automatic failover and disaster recovery. Failover must never start a second owner of the same disks. Planned
• Fleet backup policies, test restores, monitoring, alerting and capacity reports. Planned
• SSO, enforced two-factor authentication, fleet roles, audit retention and SIEM integration. Planned
• Scoped tokens, bulk actions, approvals, maintenance windows, Terraform, fleet storage and networking, security groups, chargeback and white-labeling. Planned

Deliver Connect GPL and cold moves first, Pro live migration next, and automatic failover last. Hosts remain standalone libvirt systems; Connect does not require Corosync on every host. Cloudmin Pro and Connect Pro remain separate purchases. See Professional features for the edition rules.

After the base is stable

• Xen through libvirt’s libxl driver. Planned
• Managed iSCSI/SAN and Ceph RBD storage. Planned
• Prometheus metrics and external logs. Planned
• Declarative fleet deployment, hooks and autoscaling from snapshot clones. Planned
• S3-compatible object storage, hosted databases and load balancers. Planned
• Virtualmin Connect, the optional Webmin module that replaces Cloudmin Services for Virtualmin fleet management. Planned

Not planned

Containers and Kubernetes, public cloud providers, microVM or sandbox products, mail relay and OS upgrade services, and raw QEMU launch code are outside Cloudmin 10. Containers can run inside Cloudmin virtual machines.

Delivery plan

Release gates

Cloudmin 10 ships when a supported clean OS reaches a running virtual machine without undocumented shell edits; every installer step is idempotent and tested; a supported legacy KVM guest imports without copying its disk; no failed import or migration can leave two startable owners of one disk set; create, backup, restore, clone and migration jobs survive controller restarts at tested interruption points; unsupported combinations fail in preflight with useful errors; the image catalogue has an owner and process; unit, libvirt integration and installer tests run automatically; the API and CLI are documented and covered by compatibility tests; and every supported UI workflow is documented here.