keyctl

Given these two LXC features (keyctl and nesting): there is a way to programmatically query them from inside the container? I found /sys/module/kvm_intel/parameters/nested but unfortunately it returns "Y" for both nesting=0 and nesting=1 containers.

I want to do some tests with Docker from a container in a version of Proxmox (Virtual Environment 6.4-15). To do this I found that within the Features I must mark Keyct and Nesting, but when trying to do so it does not let me edit. According to what I see in the documentation at...

We would like to enbable nesting and keyctl for our LXC containers. Our customers demand these features so they can install and use Docker. There are (fairly old) posts suggesting this would be a security risk and we should be careful if we really want to do it as it could be possible for an...

Guten Morgen, könnte man mir bitte mal erklären, was für Auswirkungen die Aktivierung der Features keyctl nesting FUSE haben? Vielen Dank