Search results for query: idmap

  1. G

    Understanding LXC UID Mappings

    ...pct set 123 -mp0 /data/vg_media/video,mp=/data # Add to /etc/subuid and /etc/subgid root:5123:1 # Add to /etc/pve/nodes/pve/lxc/123.conf lxc.idmap: u 0 100000 5000 lxc.idmap: u 5000 5123 1 lxc.idmap: u 5001 105001 60535 lxc.idmap: g 0 100000 5000 lxc.idmap: g 5000 5123 1 lxc.idmap: g 5001...
  2. H

    Permission denied for user with extra group that should have access to bind mount in unpriviledged LXCs

    ...ostype: nixos protection: 1 rootfs: local-zfs:subvol-204-disk-0,size=8G swap: 0 tags: unpriviledged unprivileged: 1 lxc.idmap: u 0 100000 1000 lxc.idmap: g 0 100000 1000 lxc.idmap: u 1000 1000 1 lxc.idmap: g 1000 1000 1 lxc.idmap: u 1001 101000 64535 lxc.idmap: g 1001 101000 64535...
  3. E

    Using large range of UIDs/GIDs above 65535 in unprivileged LXC (crashing)

    .../dev/nvidia-uvm-tools dev/nvidia-uvm-tools none bind,optional,create=file lxc.mount.entry: /dev/dri dev/dri none bind,optional,create=dir lxc.idmap: u 0 100000 1000000 lxc.idmap: g 0 100000 1000000 Container 173 /etc/subuid and /etc/subgid: # cat /etc/subuid...
  4. A

    PBS cifs smb share not mounting on cold boot

    ...journalctl -xe | grep cifs Jun 17 10:29:49 nasko1 kernel: Key type cifs.spnego registered Jun 17 10:29:49 nasko1 kernel: Key type cifs.idmap registered Jun 17 10:29:56 nasko1 kernel: CIFS: VFS: cifs_mount failed w/return code = -113 journalctl -xe Jun 17 10:32:51 nasko1...
  5. D

    QuickSync in unprivilegiertem LXC

    ...der LXC video Gruppe den gleichen Zugriff haben wie die User in der Host video Gruppe dann musst du GruppenID 27 auf GruppenID 44 mappen: lxc.idmap: g 27 44 1 Lies: "Gruppe 27 (im LXC) soll auf Gruppe 44 (auf dem Host) gemappt werden.". Die letzte Zahl besagt, dass genau eine Gruppe gemappt...
  6. R

    Yet another LXC UID/GID mapping thread

    ...I am still confused. I created an unprivileged LXC container for a samba share of a local zfs dataset. I didn't add any UID maps, "lxc.idmap..." to the lxc .conf. I didn't make any changes to /etc/subuid or /etc/subgid. I created a user on the host with the UID 101000 and a group with...
  7. R

    [Guide] Jellyfin + remote network shares + HW transcoding with Intel's QSV + unprivileged LXC

    ...c 226:0 rwm lxc.cgroup2.devices.allow: c 226:128 rwm lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file lxc.idmap: u 0 100000 65536 lxc.idmap: g 0 100000 44 lxc.idmap: g 44 44 1 lxc.idmap: g 106 104 1 lxc.idmap: g 107 100107 65429 Where group 106 is the...
  8. F

    Problem with LXC

    Hello everyone, I wanted to configure LXC alpine to use jellyfin in docker but I am facing problem after setting lxc.idmap forwarding. Docker works before these settings. I need to transfer 44 to 27 from the host. 101 has docker in LXC, and on the host 'input', and 104 to 104. Unfortunately, I...
  9. D

    QuickSync in unprivilegiertem LXC

    ...none bind,optional,create=file,mode=0666 lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file lxc.idmap: u 0 100000 65536 lxc.idmap: g 0 100000 27 lxc.idmap: g 27 44 1 lxc.idmap: g 28 100028 972 lxc.idmap: g 1000 103 1 lxc.idmap: g 1001 101001 64535...
  10. B

    Help Mapping GID 993 of Container to 104 of Host for GPU Passthrough

    ...to 104 of host(render group on host) These are the mappings I had added to my .conf. I have the 1005 ones for storage passthrough. lxc.idmap: u 0 100000 1005 lxc.idmap: u 1005 1005 1 lxc.idmap: u 1006 101006 64530 lxc.idmap: g 0 100000 44 lxc.idmap: g 44 44 1 lxc.idmap: g 45 100045 62...
  11. B

    Somehow my file system got set to read only, and now I don't know what to do.

    ...entered forwarding state [ 176.537257] netfs: FS-Cache loaded [ 176.614597] Key type cifs.spnego registered [ 176.614612] Key type cifs.idmap registered [ 176.614931] CIFS: Attempting to mount //192.168.0.116/I [ 208.637576] EXT4-fs (dm-9): recovery complete [ 208.637912] EXT4-fs...
  12. P

    [SOLVED] Plex, Arrs, and storage

    ...onboot: 1 ostype: debian rootfs: local-zfs:subvol-105-disk-0,size=4G swap: 512 tags: proxmox-helper-scripts unprivileged: 1 lxc.idmap: u 0 100000 1005 lxc.idmap: g 0 100000 1005 lxc.idmap: u 1005 1005 1 lxc.idmap: g 1005 1005 1 lxc.idmap: u 1006 101006 64530 lxc.idmap: g 1006 101006 64530
  13. fschauer

    LXC with idmap restore not working

    This should be: lxc.idmap: u 999 100999 64537 To edit the container backup you can follow these steps: Extract the container backup: zstd -d path/to/vzdump.tar.zst mkdir /tmp/vzdump-edit tar -xf path/to/vzdump.tar -C /tmp/vzdump-edit rm path/to/vzdump.tar Now edit the container config in...
  14. A

    LXC with idmap restore not working

    ...it seems a previously working backup now gives errors. When I originally created the container, I thought it would be more secure to use the idmap option so that I could use unprivileged containers that only had the minimum necessary permissions. That seems to be creating issues now. I first...
  15. S

    Seit heute random Reboots

    ...pve kernel: netfs: FS-Cache loaded May 10 22:59:52 pve kernel: Key type cifs.spnego registered May 10 22:59:52 pve kernel: Key type cifs.idmap registered May 10 22:59:52 pve kernel: CIFS: Attempting to mount //192.168.1.105/Proxmox May 10 22:59:55 pve pvesh[967]: Starting VM 103 May 10...
  16. D

    Random 6.8.4-2-pve kernel crashes

    ...are built as modules. + +## Additional changes +On top of the mainline kernel, the following changes have been made: + + * Support for VFS idmap mounts for cephfs (both architectures) + * Revert of a PCIe change breaking Qualcomm servers (aarch64 only) + * Revert of the change making...
  17. M

    Podman in rootless mode on LXC container

    ...Map UIDs/GUIDs of container <VMID> to host UIDs/GUIDs: PVE> vi /etc/pve/lxc/<VMID>.conf # <container_uid> <host_uid> <count> lxc.idmap: u 0 100000 165536 # uids 0..165536 (container) -> 100000..265536 (host) lxc.idmap: g 0 100000 165536 # gids Test if container UIDs/GUIDs are mapped: LXC>...
  18. P

    UID/GID mapping mostly working, still need some help

    ...g+s /rpool/media/data In the settings of my LXC, I've added the following from the Proxmox help: mp0: /rpool/media/data,mp=/mnt/media lxc.idmap: g 0 100000 1005 lxc.idmap: g 1005 1005 1 lxc.idmap: g 1006 101006 64530 Within the LXC itself, I created group lxc-user with GID 1005 and added...
  19. F

    Bind Mount Points -- how to fix nobody : nogroup permission denied

    Hi there, it seems I believe that this lxc.idmap: u 0 100000 1000 lxc.idmap: g 0 100000 1000 lxc.idmap: u 1000 1000 1 lxc.idmap: g 1000 1000 1 lxc.idmap: u 1001 1001 1 lxc.idmap: g 1001 1001 1 lxc.idmap: u 1002 1002 1 lxc.idmap: g 1002 1002 1 lxc.idmap: u 2000 102000 63536 lxc.idmap: g 2000...
  20. N

    GPU Passthrough for Jellyfin LXC with NVIDIA 1070 Error - Can't communicate with driver

    ...none bind,optional,create=file lxc.mount.entry: /dev/nvidia-caps/nvidia-cap2 dev/nvidia-caps/nvidia-cap2 none bind,optional,create=file lxc.idmap: u 0 100000 65536 lxc.idmap: g 0 0 1 lxc.idmap: g 1 100000 65536 I've tried running through the entire process multiple times on fresh installs of...