Terraform user with privileges to enable e.g. `keyctl`?

[yarcod]

Hi!

I've tried setting up my Proxmox homelab using Terraform for some time now, and while I have something I am quite happy with (overly complicated, that is), I have never been able to figure out how to set different "features" for newly spawned LXCs. I have created a dedicated Terraform user which currently has these privileges:

VM.Allocate VM.Clone VM.Config.CDROM VM.Config.CPU VM.Config.Cloudinit VM.Config.Disk VM.Config.HWType VM.Config.Memory VM.Config.Network VM.Config.Options VM.Monitor VM.Audit VM.PowerMgmt Datastore.AllocateSpace Datastore.Audit VM.Console

But it seems like, at least, one privilege is missing in order to enable features such as "nesting" and "keyctl" from this user. What other permission(s) do I need to add, preferably some that keeps the terraform user from gaining full administrative powers (slightly defeats the purpose)?

Thanks in advance!

 

[RolandK]

there is a terraform discord chat, i guess you get better help/support there https://www.reddit.com/r/Terraform/comments/iktkzm/discordslack/

 

[yarcod]

Thanks for that! I posted a question there as well

Even so, do you know -- or know where to look, for that matter -- which privileges are required to affect features of LXC containers? Regardless of if I'm using Terraform or not.