unprivileded

Hello everybody! Does anybody knows what is necessary in order to run privoxy inside an unprivileged container? I always get: Jul 29 23:43:51 i2pd-pve systemd-logind[84]: New seat seat0. Jul 29 23:43:56 i2pd-pve login[120]: pam_unix(login:session): session opened for user root(uid=0) by...

I was running an unprivileged LXC and converted it to a privileged one (backed it up and then restored with it set to privileged) and now I have issues with Apparmor. My main problem is starting a Docker container ~/pihole$ docker-compose up Creating network "pihole_default" with the default...

Hi Community, I'm trying to configure my unprivileged container with id mapping (PVE 6.2). Following the documentation here : https://pve.proxmox.com/wiki/Unprivileged_LXC_containers, my container failed to start with the error below : Is there a range that we cannot map ? In my container...

I can´t start a (restored) unprivileged container. If I create a new unprivileged container I can´t start it also. Apr 13 13:58:51 pve ovs-vsctl[538510]: ovs|00002|db_ctl_base|ERR|unix:/var/run/openvswitch/db.sock: database connection failed (No such file or directory) Apr 13 13:58:51 pve...

Hi again I've been trying all day to get fstrim working inside unprivileged LXC containers with no luck. Initially I thought it was just a Debian/Ubuntu issue, but I've tried multiple OS templates and it always results in: FITRIM ioctl failed: Operation not permitted. FYI it works fine in...

Hi, I need to allow some bigger uid than the default one (65536) in LXC containers (eg. mine is >72000 and new users are >120000 in the LDAP). As i understand lxc.idmap definition (in UID MAPPINGS section of linux.container manpage), these lines (in /etc/pve/local/lxc/2100.conf file) should...

Hello, I already have multiple container running in privileged mode. I discovered the way to migrate into unprivileged with the backup and restore trick. I have existing hand made template for debian 8 and 9. I'm not able to create CT in unprivileged but backup and restore trick still...