cbrm — manage BERO HOST servers from the terminal, from code, and from AI assistants

cbrm ("BERO management") operates BERO HOST KVM rootservers without clicking through the customer panel: check status, read the panel's action log, look at the VNC console, power a server on or off, type at its console. It is one package with five faces:

BERO HOST is a German provider of prepaid game, root and virtual servers. Its panel is pleasant to use by hand; cbrm exists for the moments when a script or an assistant should do the same thing. It is an independent community project, not made or endorsed by BERO HOST, and it only does what a customer can do in the panel with their own login.

What it can do

Every operation is one entry of a registry; the CLI (cbrm <feature> <vm> …), the HTTP API (POST /vms/{vm}/{feature}) and the MCP server (bero_<feature>) are generated from it, so all three offer the same features with the same rules. cbrm features lists them.

Every changing command takes --dry-run: cbrm reads the panel, checks everything, and shows the exact request it would send — without sending it.

When BERO changes the panel

cbrm checks before every change that the panel still offers exactly what the feature relies on (the Livewire component and method, the form, the endpoint in the page's own script). If anything differs it stops with "the panel changed, nothing was sent" (HTTP 409, an MCP tool error) instead of guessing. cbrm doctor <vm> runs these checks for every feature, read-only — run it on a schedule to learn about a panel change before you need the feature.

Install

pipx install cbrm                                                 # from PyPI (or: pip install cbrm)
uvx cbrm vms                                                      # run without installing (uv)
nix run git+https://git.corbet.ch/corbet-infra/cbrm -- vms        # Nix (flake)

Python 3.11 or newer. Dependencies: httpx, selectolax, websockets, vncdotool, Pillow, FastAPI, uvicorn, mcp.

Configure

export CBRM_CREDENTIALS_CMD="pass show hosting/bero-host"
cbrm vms
cbrm logs 10002 --n 5
cbrm console 10002 --out screen.png
cbrm power 10002 --action restart --confirm 10002

MCP

For Claude Code, Claude Desktop or any MCP client (stdio):

{ "mcpServers": { "bero": { "command": "uvx", "args": ["--from", "cbrm", "cbrm-mcp"],
    "env": { "CBRM_CREDENTIALS_CMD": "pass show hosting/bero-host", "CBRM_VMS": "10001 10002" } } } }

With a shared API the assistant never sees the panel password: "env": { "CBRM_API_URL": "https://cbrm.example.internal", "CBRM_API_TOKEN": "…" }. The skill skills/bero/SKILL.md teaches an agent the safe order of work (read, confirm, act, look again); copy it into your agent's skill directory.

Recipes

How it works

BERO HOST does not publish an API, so cbrm uses what the panel itself uses: its login form, its server-rendered pages, one Livewire request for the action log, the JSON endpoints behind its power buttons, and the noVNC console session it hands out (a Proxmox VNC websocket, bridged to a local port and driven with vncdotool). Details in docs/architecture.md.

If the panel changes, cbrm fails with a clear error instead of guessing; see docs/operations.md.

Where the code lives

Please open issues and pull requests on the primary; changes pushed to a mirror are overwritten.

License

LGPL-3.0-only WITH LGPL-3.0-linking-exception — use cbrm from any application under any license; changes to cbrm itself stay open. Details in LICENSE.md. Contributions are welcome under the same terms; see CONTRIBUTING.md.