Filesystem quotas are currently disabled in CT

[behnam]

I use proxmox CT and I can install cPanel On LXC but I give this message in WHM:
Filesystem quotas are currently disabled. Click to enable...

my container doesn't have /etc/fstab
and when I run /scripts/fixquotas, nothing happens.

Can the problem be solved?

 

[wolfgang]

You have enabled fs quotas at the creation of the "root disk".
Note: some FS like ZFS does not support quotas.
Also, you need a privileged container for this.

 

[behnam]

My file system:

#df -Th
Filesystem Type Size Used Avail Use% Mounted on
/dev/mapper/pve-vm--100--disk--0 ext4 49G 21G 26G 45% /
none tmpfs 492K 0 492K 0% /dev
udev devtmpfs 16G 0 16G 0% /dev/tty
tmpfs tmpfs 16G 0 16G 0% /dev/shm
tmpfs tmpfs 16G 17M 16G 1% /run
tmpfs tmpfs 16G 0 16G 0% /sys/fs/cgroup
tmpfs tmpfs 410M 0 410M 0% /run/user/0
tmpfs tmpfs 410M 0 410M 0% /run/user/1000


# lsblk
lsblk: dm-1: failed to get device path
lsblk: dm-6: failed to get device path
lsblk: dm-4: failed to get device path
lsblk: dm-2: failed to get device path
lsblk: dm-0: failed to get device path
lsblk: dm-1: failed to get device path
lsblk: dm-2: failed to get device path
lsblk: dm-0: failed to get device path
lsblk: dm-3: failed to get device path
lsblk: dm-5: failed to get device path
lsblk: dm-3: failed to get device path
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 465.7G 0 disk
|-sda2 8:2 0 512M 0 part
|-sda3 8:3 0 465.2G 0 part
`-sda1 8:1 1007K 0 part


# mount -l
/dev/mapper/pve-vm--100--disk--0 on / type ext4 (rw,relatime,stripe=16)
none on /dev type tmpfs (rw,relatime,size=492k,mode=755,uid=100000,gid=100000)
proc on /proc type proc (rw,nosuid,nodev,noexec,relatime)
proc on /proc/sys/net type proc (rw,nosuid,nodev,noexec,relatime)
proc on /proc/sys type proc (ro,nosuid,nodev,noexec,relatime)
proc on /proc/sysrq-trigger type proc (ro,nosuid,nodev,noexec,relatime)
sysfs on /sys type sysfs (rw,relatime)
fusectl on /sys/fs/fuse/connections type fusectl (rw,relatime)
lxcfs on /proc/cpuinfo type fuse.lxcfs (rw,nosuid,nodev,relatime,user_id=0,group_id=0,allow_other)
lxcfs on /proc/diskstats type fuse.lxcfs (rw,nosuid,nodev,relatime,user_id=0,group_id=0,allow_other)
lxcfs on /proc/loadavg type fuse.lxcfs (rw,nosuid,nodev,relatime,user_id=0,group_id=0,allow_other)
lxcfs on /proc/meminfo type fuse.lxcfs (rw,nosuid,nodev,relatime,user_id=0,group_id=0,allow_other)
lxcfs on /proc/stat type fuse.lxcfs (rw,nosuid,nodev,relatime,user_id=0,group_id=0,allow_other)
lxcfs on /proc/swaps type fuse.lxcfs (rw,nosuid,nodev,relatime,user_id=0,group_id=0,allow_other)
lxcfs on /proc/uptime type fuse.lxcfs (rw,nosuid,nodev,relatime,user_id=0,group_id=0,allow_other)
udev on /dev/full type devtmpfs (rw,nosuid,relatime,size=16436112k,nr_inodes=4109028,mode=755)
udev on /dev/null type devtmpfs (rw,nosuid,relatime,size=16436112k,nr_inodes=4109028,mode=755)
udev on /dev/random type devtmpfs (rw,nosuid,relatime,size=16436112k,nr_inodes=4109028,mode=755)
udev on /dev/tty type devtmpfs (rw,nosuid,relatime,size=16436112k,nr_inodes=4109028,mode=755)
udev on /dev/urandom type devtmpfs (rw,nosuid,relatime,size=16436112k,nr_inodes=4109028,mode=755)
udev on /dev/zero type devtmpfs (rw,nosuid,relatime,size=16436112k,nr_inodes=4109028,mode=755)
devpts on /dev/console type devpts (rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=000)
devpts on /dev/pts type devpts (rw,nosuid,noexec,relatime,gid=100005,mode=620,ptmxmode=666,max=1024)
devpts on /dev/ptmx type devpts (rw,nosuid,noexec,relatime,gid=100005,mode=620,ptmxmode=666,max=1024)
devpts on /dev/tty1 type devpts (rw,nosuid,noexec,relatime,gid=100005,mode=620,ptmxmode=666,max=1024)
devpts on /dev/tty2 type devpts (rw,nosuid,noexec,relatime,gid=100005,mode=620,ptmxmode=666,max=1024)
tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev,uid=100000,gid=100000)
tmpfs on /run type tmpfs (rw,nosuid,nodev,mode=755,uid=100000,gid=100000)
tmpfs on /sys/fs/cgroup type tmpfs (ro,nosuid,nodev,noexec,mode=755,uid=100000,gid=100000)
cgroup on /sys/fs/cgroup/systemd type cgroup (rw,nosuid,nodev,noexec,relatime,xattr,name=systemd)
cgroup on /sys/fs/cgroup/devices type cgroup (rw,nosuid,nodev,noexec,relatime,devices)
cgroup on /sys/fs/cgroup/pids type cgroup (rw,nosuid,nodev,noexec,relatime,pids)
cgroup on /sys/fs/cgroup/net_cls,net_prio type cgroup (rw,nosuid,nodev,noexec,relatime,net_cls,net_prio)
cgroup on /sys/fs/cgroup/freezer type cgroup (rw,nosuid,nodev,noexec,relatime,freezer)
cgroup on /sys/fs/cgroup/perf_event type cgroup (rw,nosuid,nodev,noexec,relatime,perf_event)
cgroup on /sys/fs/cgroup/hugetlb type cgroup (rw,nosuid,nodev,noexec,relatime,hugetlb)
cgroup on /sys/fs/cgroup/blkio type cgroup (rw,nosuid,nodev,noexec,relatime,blkio)
cgroup on /sys/fs/cgroup/cpu,cpuacct type cgroup (rw,nosuid,nodev,noexec,relatime,cpu,cpuacct)
cgroup on /sys/fs/cgroup/cpuset type cgroup (rw,nosuid,nodev,noexec,relatime,cpuset)
cgroup on /sys/fs/cgroup/memory type cgroup (rw,nosuid,nodev,noexec,relatime,memory)
cgroup on /sys/fs/cgroup/rdma type cgroup (rw,nosuid,nodev,noexec,relatime,rdma)
mqueue on /dev/mqueue type mqueue (rw,relatime)
tmpfs on /run/user/0 type tmpfs (rw,nosuid,nodev,relatime,size=419432k,mode=700,uid=100000,gid=100000)
none on /home/virtfs/exirland/dev type tmpfs (rw,relatime,size=492k,mode=755,uid=100000,gid=100000)
/dev/mapper/pve-vm--100--disk--0 on /home/virtfs/exirland/opt type ext4 (ro,nosuid,relatime,stripe=16)
/dev/mapper/pve-vm--100--disk--0 on /home/virtfs/exirland/tmp type ext4 (rw,relatime,stripe=16)
/dev/mapper/pve-vm--100--disk--0 on /home/virtfs/exirland/usr type ext4 (ro,nosuid,relatime,stripe=16)
/dev/mapper/pve-vm--100--disk--0 on /home/virtfs/exirland/var type ext4 (ro,nosuid,relatime,stripe=16)
/dev/mapper/pve-vm--100--disk--0 on /home/virtfs/exirland/etc/scl type ext4 (ro,nosuid,noexec,relatime,stripe=16)
/dev/mapper/pve-vm--100--disk--0 on /home/virtfs/exirland/var/log type ext4 (rw,relatime,stripe=16)
/dev/mapper/pve-vm--100--disk--0 on /home/virtfs/exirland/var/tmp type ext4 (rw,relatime,stripe=16)
/dev/mapper/pve-vm--100--disk--0 on /home/virtfs/exirland/etc/mail type ext4 (rw,relatime,stripe=16)
/dev/mapper/pve-vm--100--disk--0 on /home/virtfs/exirland/usr/sbin type ext4 (ro,relatime,stripe=16)
/dev/mapper/pve-vm--100--disk--0 on /home/virtfs/exirland/var/spool type ext4 (rw,relatime,stripe=16)
/dev/mapper/pve-vm--100--disk--0 on /home/virtfs/exirland/etc/apache2 type ext4 (ro,nosuid,relatime,stripe=16)
/dev/mapper/pve-vm--100--disk--0 on /home/virtfs/exirland/etc/pki/tls type ext4 (ro,nosuid,relatime,stripe=16)
/dev/mapper/pve-vm--100--disk--0 on /home/virtfs/exirland/etc/alternatives type ext4 (ro,nosuid,relatime,stripe=16)
/dev/mapper/pve-vm--100--disk--0 on /home/virtfs/exirland/etc/pki/ca-trust type ext4 (ro,nosuid,relatime,stripe=16)
/dev/mapper/pve-vm--100--disk--0 on /home/virtfs/exirland/var/cpanel/php/sessions type ext4 (rw,relatime,stripe=16)
/dev/mapper/pve-vm--100--disk--0 on /home/virtfs/exirland/var/cpanel/email_send_limits type ext4 (rw,relatime,stripe=16)
/dev/mapper/pve-vm--100--disk--0 on /home/virtfs/exirland/home/exirland type ext4 (rw,relatime,stripe=16)
tmpfs on /run/user/1000 type tmpfs (rw,nosuid,nodev,relatime,size=419432k,mode=700,uid=101000,gid=101002)

What should I do?

 

[behnam]

I add
lxc.rootfs.options: usrjquota=aquota.user,grpjquota=aquota.group,jqfmt=vfsv0

to:
/var/lib/lxc/100/config

but this line was disappear after rebooted CT.

For

• Enable Quota: Check

must CT in privileged mode aren't safe.

What should I do?

 

[wolfgang]

As I say you have to do this on creation time.
You have to create the container new again.

 

[behnam]

As I say you have to do this on creation time.
You have to create the container new again.

Should CT be in the privileged mode?
Isn't there a security problem?
According to this guide?

https://pve.proxmox.com/wiki/Linux_Container#pct_settings

 

[behnam]

don't have any idea about this problem? I want to enable quotas for CTs

 

[oguz]

Should CT be in the privileged mode?

yes

Isn't there a security problem?
According to this guide?

yes, but unprivileged containers have no support for quotas (because of syscall limitations for the userspace) at the moment

 

[behnam]

yes



yes, but unprivileged containers have no support for quotas (because of syscall limitations for the userspace) at the moment

In my last reply. I attached an image and "Enable quota" is not selectable when I create a new CT, why?

 

[oguz]

In my last reply. I attached an image and "Enable quota" is not selectable when I create a new CT, why?

did you unselect the 'unprivileged' checkbox in the first step of the CT creation wizard?