unprivileged

Hello together, Currently I'm running Proxmox VE 5.4-2 (running kernel: 4.15.18-20-pve) and I wanted to have a secondary Samba 4 domain controller in an unprivileged LXC container. I installed in a container the debian-10.0-standard_10.0-1_amd64.tar.gz and upgraded it afterwards to Debian...

Hello together, Currently I'm running Proxmox VE 5.4-2 (running kernel: 4.15.18-20-pve) and I wanted to have a secondary Samba 4 domain controller in an unprivileged LXC container. I installed in a container the debian-10.0-standard_10.0-1_amd64.tar.gz and upgraded it afterwards to Debian...

I'm trying to mount a USB Zwave device in a container and I had this configuration working in an older installation but now I'm running into permission issues. Here is my conf file for the container: arch: amd64 cores: 2 hostname: hass memory: 8192 net0...

Hi, I'm running FreeIPA and I would like to use unprivileged containers so I can use Docker in containers. My Proxmox host is joined to IPA, and my containers too. My FreeIPA install uses 1284000000-1284200000 for uids and gids. This breaks with: $ cat /etc/subuid root:100000:65536 $ cat...

Hi, I'm toying with unprivileged containers in order to be able to use Docker inside them. This seems to work, but it break my FreeIPA setup. My Proxmox host is joined to FreeIPA, and my provisioning procedure for containers also joins them to FreeIPA. This means that my user is in a very...

Reading https://pve.proxmox.com/wiki/Linux_Container#_privileged_containers both Proxmox and the LXC team are recommending that we use unprivileged containers, and stop using privileged containers. So why is not the default?

I am trying to create a Nextcloud container, but it is saying it is not permitted to mknod urandom and random. I don't know what this means, but I am having trouble finding the solution. I do not know what you need to know to help me, so please let me know. Thanks in advance. Formatting...

Hi, I'm trying to bind-mount a folder in an unprivileged container and be able to read-write-create files on that mount. But so far I was only able to mount the folder but from within the container it is not possible to even see the contents of the folder (nobody permissions). So I'm trying...

I am trying to mount a host LVM to multiple unprivileged containers but having little luck. Here is the relevant parts of my unprivileged container conf file. What I have done: Created a uid/gid on the HOST and CONTAINER for app-files (1005) mp0: local-lvm:vm-108-disk-3,mp=/mnt/MYDIR...

On a completely fresh install of Proxmox VE 5.1, I'm unable to create unprivileged containers from templates and creating backups. I get permission errors when I try. The issue with creating the containers seems to be that templates gets saved with root ownership and strict permissions that...

Hi, Where to see if a linux container is privileged or not? Rephrased: How to check if a CT is unprivileged? At https..//pve.proxmox.com/wiki/Unprivileged_LXC_containers is only stated it must be set during create. Nothing the check the result. I did create through rest API and can't see...

I have mounted a CIFs share in my proxmox host that presents files as owned by foo:users. Foo's id is 1002. I want to present this share to a unprivileged container, I'm assuming using a bind mount. The user in the container has id 1000:1000, and creates files like so. I have added the...

I am using unprivi CTs for the first time. Build: prox 5 ve 2x Dell R720 with 6xSAS drives each in hardware RAID10 running default local thin LVM storage. Dual e5-2640 CPUs, 64GB ram etc. Findings: Downloaded the centos 6 template (v20161207) via the prox ve. Did a yum update. Everything works...

Hi. I've dumped an existing unprivileged LXC container to NFS storage and then tried to restore it on the same Proxmox server with unprivileged box ticked. The restoration has failed with the following error: ... extracting archive...

Say I have 5 containers each running an application. For each I have bind mounted a directory: /mnt/container_data/container1 /mnt/container_data/container2 etc Where the application will contain all its application data. I now create a further container running a backup application. To that...

How do change (persistent) limits (open files) for unprivileged containers? root@container1:~# ulimit -n 65536 -bash: ulimit: open files: cannot modify limit: Operation not permitted prlimit - not affected changes in pvenode:/etc/security/limit.conf - not affected

First of all, thanks for this feature! I'm now converting almost of my containers into unprivileged ones. But as i'm doing some kind of Docker-like separation of code and data on almost all services using a lot of mountpoints, i just felt some need to discuss things ;) Example: I have some...