I know about bindmounts - is there a way to mount an SMB/CIFS share in multiple containers with different credentials for each?

[Jeremy E]

Ideally (for logic's sake) I'd be mounting any share inside a container (full stop), however it seems that bindmounts are the way things are done with PVE:

I've started with a bindmount and a user that has RO access to a NAS shared drive which suffices for the LXC that only needs read access.
I'm wanting to add (in another container) RW access to the same share (I have two users on the NAS already)... do I:

1. Use a RW user to mount the volume inside the host with ro=1 on the bindmount/LXC that only needs RO access. [My least preferred option, but will get the job done.]
2. mount.cifs inside the LXCs - one with the RO user, one with the RW user. [My preferred option - though this doesn't seem to be a way that integrates (plays nicely?) with PVE.]
3. Something else? [I'm open to ideas here.]

The PVE host doesn't even need to have access to this share so if it doesn't I sleep better.

Sorry in advance, it's been a long time since I've been an active Linux admin, maybe no one answers this question (I've seen it a few times) because the solution is something rudimentary we're all overlooking.

 

[fschauer]

mount.cifs inside the LXCs - one with the RO user, one with the RW user. [My preferred option - though this doesn't seem to be a way that integrates (plays nicely?) with PVE.]

There is a way.
Under Container -> Options -> Features -> enable FUSE.
Install rclone and fuse3 in the container.
Run rclone config and setup an SMB remote.
Mount it where needed with rclone mount ...
You can setup a service in the container to mount it automatically.