You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The hermesagent script is ready for testing: bash -c "$(curl -fsSL https://github.com/community-scripts/ProxmoxVED/raw/main/ct/hermesagent.sh)"
Installation sources scripts outside of Community Scripts repo. Please check the source before installing.
Hermes can execute terminal commands. The agent runs as a dedicated 'hermes' service user for isolation.
After container startup, login, switch to the hermes user (su - hermes) and run 'hermes setup' to configure your model provider and gateway server.
OpenAI-compatible API server available at http://:8642/v1. API key is stored in /home/hermes/.hermes/.env.
Access the web dashboard via SSH tunnel: ssh -fNL 9119:localhost:9119 root@, then open http://localhost:9119
Note: This is not in the official repo yet—it's just a dev version! After merging into ProxmoxVE, it will need to be recreated.
Doing the SSH tunnel: ssh -fNL 9119:localhost:9119 root@IP was a pain, I modified the hermes dashboard to able to listen in all interface. Now I can access like http://192.168.2.27:9119/
Found the solution:
systemctl stop hermes-gateway.service
systemctl edit hermes-gateway.service
### Editing /etc/systemd/system/hermes-gateway.service.d/override.conf
### Anything between here and the comment below will become the contents of the drop-in file
[Service]
ExecStart=
ExecStart=/home/hermes/.hermes/hermes-agent/venv/bin/python -m hermes_cli.main gateway run
### Edits below this comment will be discarded
...
Installed fine for me. But setting up the hermes gateway as a service seems to be a pain
and
I am getting error for gateway every 5 minutes, now sure why. Investigating.
The intended pattern is install as a hermes user service. For the hermes user enable-linger is already set so the service will launch on system startup. This is better for security and isolation of the hermes gateway process. It also lets the hermes update script stop and start the services without root access. I would recommend removing the system service and installing hermes gateway as a user service. Happy to update the json instructions and add a note on the install output so other users don't fall in this trap.
Doing the SSH tunnel: ssh -fNL 9119:localhost:9119 root@IP was a pain, I modified the hermes dashboard to able to listen in all interface. Now I can access like http://192.168.2.27:9119/
This is a big security issue since the hermes gateway is not secured and doesn't even run via https. Anyone can log into your instance and all of your dashboard traffic is exposed to the network. I agree that setting up an ssh tunnel is not a great user experience and I installed a reverse proxy using Caddy on my own instance. However, I think it is better not to overcomplicate the installer right now given the rate of change on the hermes-agent project.
While running hermes setup, it wants to install other tools (like the tts engine) but it needs a password but the hermes user doesn't have a password set and is not in sudoers.
I noticed one more gotcha. Now that the setup runs as root it creates the gateway service, but is unable to enable/start it automatically. I will file a second PR for this, because it is surprising to new users when they said to start the gateway, but it isn't working.
I added a PR to fix this as well. Once this is merged would appreciate someone running through the full setup flow once more (I did this myself, but always better to have a second person validate): #1860
As you asked for feedback on the setup: I just ran the helper script and went through the default installation. I then ran /usr/bin/hermes-setup on root and then switched to the hermes user. Installation went fine. The script does not put .local/bin PATH into the /.bashrc so i still had to do that manually. After fighting for a second with my claude integration from then on it works like a charm.
Activity
github-actions commentedon May 18, 2026
The hermesagent script is ready for testing:
bash -c "$(curl -fsSL https://github.com/community-scripts/ProxmoxVED/raw/main/ct/hermesagent.sh)"Installation sources scripts outside of Community Scripts repo. Please check the source before installing.
Hermes can execute terminal commands. The agent runs as a dedicated 'hermes' service user for isolation.
After container startup, login, switch to the hermes user (su - hermes) and run 'hermes setup' to configure your model provider and gateway server.
OpenAI-compatible API server available at http://:8642/v1. API key is stored in /home/hermes/.hermes/.env.
Access the web dashboard via SSH tunnel: ssh -fNL 9119:localhost:9119 root@, then open http://localhost:9119
Note: This is not in the official repo yet—it's just a dev version! After merging into ProxmoxVE, it will need to be recreated.
jenishngl commentedon May 18, 2026
Installed fine for me. But setting up the hermes gateway as a service seems to be a pain
I fixed it using this command
created a symlink to the local bin
jomz commentedon May 18, 2026
Installation completed, but when I try to open console, I get a 500 timeout response.
This should help:
unexpected extra arguments, use '-h' for usage
TASK ERROR: command '/usr/bin/termproxy 5901 --path /vms/421 --perm VM.Console --vncticket-endpoint --verify-port --ticket-fd 6 -- /usr/bin/dtach -A /var/run/dtach/vzctlconsole421 -r winch -z lxc-console -n 421 -e -1' failed: exit code 1
MickLesk commentedon May 18, 2026
You need to Update your Proxmox Host. Its an old known bug
EelmanEmbedded commentedon May 20, 2026
Script hang on "Installing Hermes Agent" on default settings. ProxmoxVED/install/hermesagent-install.sh#L48-L51
Logfile shows Hermes install script was finished. Can't login the created container because I don't know the generated password.
markycalvert commentedon May 21, 2026
/ / / /__ _________ ___ ___ _____ / | ____ ____ ____ / /_
/ // / _ / / __
__ \/ _ \/ ___/ / /| |/ __/ _ / __ / __// __ / __/ / / / / / / / ( ) / ___ / // / _/ / / / /
// //___// // // //___// // |_, /___// //_/
/___/
✖️ This version of Proxmox VE is not yet supported.
✖️ Supported: Proxmox VE version 9.0 – 9.1
mmahmoodictbd commentedon May 22, 2026
Doing the SSH tunnel:
ssh -fNL 9119:localhost:9119 root@IPwas a pain, I modified the hermes dashboard to able to listen in all interface. Now I can access like http://192.168.2.27:9119/sudo systemctl stop hermes-dashboard
sudo systemctl edit --full hermes-dashboard.service
ExecStart=/home/hermes/.local/bin/hermes dashboard --host 0.0.0.0 --insecure --port 9119 --no-open
sudo systemctl start hermes-dashboard
mmahmoodictbd commentedon May 22, 2026
I am getting error for gateway every 5 minutes, now sure why. Investigating.
mmahmoodictbd commentedon May 22, 2026
Found the solution:
systemctl stop hermes-gateway.service
systemctl edit hermes-gateway.service
systemctl start hermes-gateway.service
steveonjava commentedon May 23, 2026
Thanks for the detailed testing, @mmahmoodictbd!
The intended pattern is install as a hermes user service. For the hermes user enable-linger is already set so the service will launch on system startup. This is better for security and isolation of the hermes gateway process. It also lets the hermes update script stop and start the services without root access. I would recommend removing the system service and installing hermes gateway as a user service. Happy to update the json instructions and add a note on the install output so other users don't fall in this trap.
This is a big security issue since the hermes gateway is not secured and doesn't even run via https. Anyone can log into your instance and all of your dashboard traffic is exposed to the network. I agree that setting up an ssh tunnel is not a great user experience and I installed a reverse proxy using Caddy on my own instance. However, I think it is better not to overcomplicate the installer right now given the rate of change on the hermes-agent project.
hofmn commentedon May 23, 2026
For me everything worked fine. But i did not try to access the Dashboard via ssh.
AfzalivE commentedon May 23, 2026
While running
hermes setup, it wants to install other tools (like the tts engine) but it needs a password but the hermes user doesn't have a password set and is not in sudoers.2 remaining items
MickLesk commentedon May 24, 2026
Do you make an PR?
AfzalivE commentedon May 24, 2026
No. I didn't think that would be accepted as default 😅
Should I?
MickLesk commentedon May 24, 2026
I mean @steveonjava ^^ He is the responsible for this tool
steveonjava commentedon May 24, 2026
I filed a PR for the improvement discussed in this thread: #1858
steveonjava commentedon May 24, 2026
Make that #1859. The automated PR checker was overeager in closing my previous PR for a section marked optional. 🤷
steveonjava commentedon May 24, 2026
Thanks for helping with the merge, @MickLesk! 🙏
I noticed one more gotcha. Now that the setup runs as root it creates the gateway service, but is unable to enable/start it automatically. I will file a second PR for this, because it is surprising to new users when they said to start the gateway, but it isn't working.
steveonjava commentedon May 24, 2026
I added a PR to fix this as well. Once this is merged would appreciate someone running through the full setup flow once more (I did this myself, but always better to have a second person validate):
#1860
J0ekr commentedon May 25, 2026
As you asked for feedback on the setup: I just ran the helper script and went through the default installation. I then ran
/usr/bin/hermes-setupon root and then switched to thehermesuser. Installation went fine. The script does not put.local/binPATH into the/.bashrcso i still had to do that manually. After fighting for a second with my claude integration from then on it works like a charm.steveonjava commentedon May 26, 2026
Thanks for testing, @J0ekr! 🙏 Glad you got it working with Claude.
On the
.local/bin, it should get added to the path by~/.profile. I just created an instance this afternoon and it is there as expected:Probably what happened is that you switched to the hermes user with a non-login shell by using:
su hermesThe correct pattern is:
su - hermesThis will start a login shell and source .profile.
steveonjava commentedon May 26, 2026
I added a simple PR so when logged in as root you get a reminder on the command to switch to the hermes user:
#1863
michelroegl-brunner commentedon May 27, 2026
Merged with #14751 in ProxmoxVE