cbrm — manage BERO HOST servers from the terminal, from code, and from AI assistants

cbrm ("BERO management") operates BERO HOST KVM rootservers without clicking through the customer panel: check status, read the panel's action log, look at the VNC console, power a server on or off, type at its console. It is one package with five faces:

BERO HOST is a German provider of prepaid game, root and virtual servers. Its panel is pleasant to use by hand; cbrm exists for the moments when a script or an assistant should do the same thing. It is an independent community project, not made or endorsed by BERO HOST, and it only does what a customer can do in the panel with their own login.

What it can do

Every changing operation repeats its target (--confirm <vm> / confirm) and is written to an audit log (secrets never are). A reinstall erases the disk and therefore needs the target twice (--confirm and --confirm-destroy). Not included yet: backups and restore, network reset, ISO and boot order, renewals, upgrades and credit.

A typical fresh start with your own operating system: cbrm reinstall <vm> --template "Arch Linux" --ssh-key <your key> …, wait until SSH answers with your key, then install what you like over SSH (for example with nixos-anywhere).

Install

pipx install cbrm                                                 # from PyPI (or: pip install cbrm)
uvx cbrm vms                                                      # run without installing (uv)
nix run git+https://git.corbet.ch/corbet-infra/cbrm -- vms        # Nix (flake)

Python 3.11 or newer. Dependencies: httpx, selectolax, websockets, vncdotool, Pillow, FastAPI, uvicorn, mcp.

Configure

export CBRM_CREDENTIALS_CMD="pass show hosting/bero-host"
cbrm vms
cbrm logs 10002 -n 5
cbrm console 10002 screen.png
cbrm power 10002 restart --confirm 10002

MCP

For Claude Code, Claude Desktop or any MCP client (stdio):

{ "mcpServers": { "bero": { "command": "uvx", "args": ["--from", "cbrm", "cbrm-mcp"],
    "env": { "CBRM_CREDENTIALS_CMD": "pass show hosting/bero-host", "CBRM_VMS": "10001 10002" } } } }

With a shared API the assistant never sees the panel password: "env": { "CBRM_API_URL": "https://cbrm.example.internal", "CBRM_API_TOKEN": "…" }. The skill skills/bero/SKILL.md teaches an agent the safe order of work (read, confirm, act, look again); copy it into your agent's skill directory.

How it works

BERO HOST does not publish an API, so cbrm uses what the panel itself uses: its login form, its server-rendered pages, one Livewire request for the action log, the JSON endpoints behind its power buttons, and the noVNC console session it hands out (a Proxmox VNC websocket, bridged to a local port and driven with vncdotool). Details in docs/architecture.md.

If the panel changes, cbrm fails with a clear error instead of guessing; see docs/operations.md.

Where the code lives

Please open issues and pull requests on the primary; changes pushed to a mirror are overwritten.

License

LGPL-3.0-only WITH LGPL-3.0-linking-exception — use cbrm from any application under any license; changes to cbrm itself stay open. Details in LICENSE.md. Contributions are welcome under the same terms; see CONTRIBUTING.md.