Netronome #2439

Activity

1. MickLesk

   added

   task

   Ready For Testing

   on Oct 16, 2026
2. community-scripts-issue-bot commented on Oct 16, 2026

   

   community-scripts-issue-botbot

   on Oct 16, 2026

   More actions

   The Netronome script is ready for testing. Run it in the Proxmox VE shell (or on an Incus host) to create a container:

   bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/DevScripts/main/ct/netronome.sh)"
   

   Netronome has no default login. On the first visit to http://:7575 it shows a registration page; the account created there is the only one it accepts, and registration closes after it. Until then anyone who can reach the port can claim it, so create yours right after the install. Further accounts and password resets work in the container console: netronome create-user and netronome change-password (both ask for the password, or read it from standard input).
   /opt/netronome_data holds config.toml (with the session secret that signs logins), the SQLite database netronome.db with its -wal and -shm files, and after a theme license activation its .device-id; back up the whole folder. /root/.config/netronome points there, so the CLI commands from the upstream documentation find this configuration without --config. Updates install the new .deb, which only replaces /usr/bin/netronome, and also update librespeed-cli.
   All test types work out of the box: Speedtest.net is built in, LibreSpeed uses librespeed-cli, the Traceroute tab uses traceroute, and packet loss monitors use mtr for per-hop results. An iperf3 test needs an iperf3 server to test against: run iperf3 -s on another host and add it under Speed Test > iperf3 > Add. Your own LibreSpeed servers go in /opt/netronome_data/librespeed-servers.json.
   Netronome runs as root, which keeps CAP_NET_RAW in an unprivileged container, so ping, MTR in ICMP mode and the packet loss monitors work without setcap or a privileged container. Should the capability be dropped, MTR fails and the monitors fall back to unprivileged ping without per-hop data, which needs net.ipv4.ping_group_range to include group 0.
   To watch other machines, run the agent there, not in this container: install vnstat on the host, then run curl -sL https://netrono.me/install-agent | sudo bash, which installs netronome agent as a service on port 8200 and prints its URL and API key; add those on the Agents tab. The installer offers a daily auto-update timer that pipes the install script from GitHub into bash as root; decline it if you would rather update agents yourself.
   Port 7575 is plain HTTP, and /api/speedtest/public/history lists your speed test results without a login. For access beyond your LAN, put a reverse proxy with TLS in front; if you use the IP whitelist in config.toml behind it, add the proxy's address to trusted_proxies. OpenID Connect sign-in is set up by uncommenting [oidc] in config.toml (redirect URL https:///api/auth/oidc/callback), followed by systemctl restart netronome.
   Netronome keeps every result until you delete it under Settings > Data > Purge History. It also supports PostgreSQL ([database] in config.toml), which this script does not set up; switching starts with an empty database. Netronome uses about 55 MB of RAM when idle.

   Note: This is not in the official repo yet—it's just a dev version! After merging into ProxmoxVE, it will need to be recreated.

   Discord testing thread: https://discord.com/channels/1302816934508630047/1560771594673193031