Skip to content
Security hardening, live updates and lease fixes
Verlocx

Every test VM gets a last day.

Suspend in
18days
  • d23notify owner
  • d30suspend
  • d44delete vm
Sat 14 Nov · day 12
rule test-vms-30danchor: first matchedday 12 / 44
Mon 02 NovWed 16 Dec

Sat 14 Nov · next: notify owner on Wed 25 Nov (in 11 days)

Time-to-live on VMs with automatic expiry actions, plus recurring power schedules. Owners are notified before a lease runs out.

Leases (1)Power schedules (0)

Summary

Active leases

0

Expiring within 7 days

0

Expired / executed

0

Power schedules

0

Filter
Virtual machineOwnerExpiresOn expiryStatusRenewals

test-vms-30d

tagged "test" and has no lease of its own

Group lease · 1 VM
notify in 11 daysnext stage · Nov 25, 2026
23d Notify30d Suspend44d Delete
Active1
test-api-2317day 12Notify in 11 daysnothing has run yet0/3
No leases
Rows per page25
Page 1 of 1
Notifications
View alerts
You’re all caught up.

Owners are warned, the VM is hibernated, then removed — completely.

Open the portal

Activity

Sat 14 Nov
TimeActorActionTargetPermissionResult
12d ago
Nov 2, 09:12:40 AM
j.weber
Created group lease "test-vms-30d" (tagged "test" and has no lease of its own · 23d notify → 30d suspend → 44d delete)lease-rule:test-vms-30dlease.manageallowed

One VM, one date.

An expiry date, and what happens then — suspend, power off, delete or just notify.

Filter
Virtual machineOwnerExpiresOn expiryStatusRenewals
web-dev-2210j.weber
in 11 daysNov 20, 2026
SuspendActive0
1–1 of 1 lease
Rows per page25
Page 1 of 1
demo clock · Nov 9, 2026
Edit lease
web-dev-2210 — changing the date resets warning notifications and re-arms the expiry action.
Expiry date
When the lease expires

Off when nobody’s there.

Paint a week — every on/off edge becomes one power schedule.

off edges run

illustration — the portal creates schedules one at a time

MonTueWedThuFriSatSun

60hours a week on

60 of 168 on · 108 off · click or drag to paint, arrows + space

Leases (0)Power schedules (2)
Filter
Virtual machineActionDaysTimeTimezoneLast runEnabled
web-dev-2210StartMon, Tue, Wed, Thu, Fri07:00Europe/Berlinnever
web-dev-2210ShutdownMon, Tue, Wed, Thu, Fri19:00Europe/Berlinnever
1–2 of 2 schedules
Rows per page25
Page 1 of 1

One rule for a whole project.

Pick VMs by what they are, then walk each one through staged actions, counted in days.

Group lease
A project-wide lease: pick the VMs by their properties, then say what happens to each of them and when.
Nametest-vms-30d
Description (optional)Why this policy exists
Which VMsMatch
Taghas tagtest
Own leasehas no lease of its own

Matches 3 VMs right now

test-api-2317#2317test-web-2318#2318lab-ci-3001#3001
What happens, and when
afterdaysOptional note for the ownernotify
afterdaysOptional note for the ownernotify
afterdaysOptional note for the ownernotify
Count the days from

Apply stages already overdue

Off: a VM that joins past a stage skips it. On: the chain catches up, one stage per minute.

This rule permanently deletes matched VMs (a real hypervisor destroy plus AD cleanup, exactly like the delete action on the VM page). 1 of the currently matched VMs are deletion-protected and will be skipped.
Covers 3 VMs today · new VMs join automatically
Virtual machineOwnerExpiresOn expiryStatusRenewals

test-vms-30d

tagged "test" and has no lease of its own

Group lease · 3 VMs
notify in 23 daysnext stage · Nov 25, 2026
23d Notify30d Suspend44d Delete
Active3
test-api-2317day 0Notify in 23 daysnothing has run yet0/3
test-web-2318day 0Notify in 23 daysnothing has run yet0/3
lab-ci-3001day 0Notify in 23 daysnothing has run yet0/3

3 of 8 VMs match · same matcher as the scheduler

What the scheduler won’t do.

  1. §1

    No conditions, no VMs.

  2. §2

    A new rule doesn’t rewrite history.

  3. §3

    One stage per VM per minute.

  4. §4

    A failed stage is reported, not retried in a loop.

  5. §5

    A rule can do no more than its author.

  6. §6

    Deletion protection always wins.

  7. §7

    Leaving a rule resets it.

Suspended means asleep, not lost.

A real hibernate: memory goes to storage, the host’s RAM is released.

Day 44

When it goes, it goes completely.

The same destroy path as the delete button on the VM page.

  1. Checks first

    Protected VMs, and VMs a configuration run holds, are skipped.

  2. Stop the guest

    Up to 30 seconds. If it won’t stop, nothing is deleted.

  3. Destroy it on the cluster

    With purge — disks, backup-job, HA and replication entries too.

  4. Remove the AD computer object

    With the project’s domain-join account — no stale computer accounts.

  5. Drop the portal record

    Only after a successful destroy — the VM is never orphaned.

  6. Write it down

    One line in the activity log.

Activity

TimeActorActionTargetPermissionResult
Day 44 · deleting test-api-2317…
Notifications1 new
View alerts
Group lease "test-vms-30d" — Delete on "test-api-2317"

Deleted VM Day 44 of the "test-vms-30d" group lease (counted from when the rule first matched this VM). This was the last stage of the rule.

› next: pick an end date for the next test VM

See pricing

Self-service VMs →Roles & audit →Snapshots & backups →

See Verlocx in action

A 30-minute walkthrough on your use case — deployments, workflows, governance.

Hypervisor

We use your details only to handle this request — privacy policy.

Type to search the docs, the user guide, all features, the product pages and the changelog.

↑ ↓ to move↵ to openesc to close