Another Unprivileged LXC container issue

WestcheterSunDevil

New Member
Oct 10, 2024
1
0
1
I am new to Proxmox, and do not have have a Linux background other than using TrueNAS Scale for a couple of years.
I have successfully virtualized TrueNAS Scale in Proxmox. All ZFS pools are passed through to TrueNAS including the dataset for storing containers. The VMs and CTs all installed and run on the TrueNAS pool fine via NFS shares (couldn't figure out iSCSI). Now I am trying to migrate the TrueNAS dockers (running in the TN sandbox) to an Unprivileged Debian CT directly in Proxmox, but can't access the bind mount points properly from the Unprivileged Container.

I see all the mount points in the container

root@docker-arrs:/lxc_share# ls -l
total 43
drwxrwx--- 4 apps apps 4 Jul 2 20:58 arrdata
drwxrwxr-x 6 apps apps 6 Oct 26 14:29 arrs
drwxr-xr-x 9 apps apps 9 Oct 26 14:04 familyshare
drwxrwx--- 16 apps apps 17 Oct 30 12:33 media
drwxrwx--x 8 apps apps 8 Oct 26 18:04 old_docker

They match the mount points of the Host, I see Linux doesn't like users below 1000 but TrueNAS already created the user and group and are referenced in the current working dockers so I left it.

root@proxmox:/mnt/lxc_shares# ls -l
total 43
drwxrwx--- 4 apps apps 4 Jul 2 20:58 arrdata
drwxrwxr-x 6 apps apps 6 Oct 26 14:29 arrs
drwxr-xr-x 9 apps apps 9 Oct 26 14:04 familyshare
drwxrwx--- 16 apps apps 17 Oct 30 12:33 media
drwxrwx--x 8 apps apps 8 Oct 26 18:04 old_docker
root@proxmox:/mnt/lxc_shares


From the host I can write and delete files, with no issues

root@proxmox:/mnt/lxc_shares/media# touch testwrite
root@proxmox:/mnt/lxc_shares/media# ls -l
total 518
drwxrwx--- 4 apps apps 4 Apr 27 2024 Books
drwxrwx--- 3 apps apps 3 May 27 12:15 Documentaries
drwxrwx--- 3 apps apps 3 Nov 20 2021 'Home Movies'
drwxrwx--- 2 apps apps 2 Sep 1 11:36 images
drwxrwx--- 593 apps apps 593 Oct 28 21:16 Movies
drwxrwx--- 64 apps apps 381 Jun 7 12:14 Music
drwxrwx--- 3 apps apps 3 Oct 20 13:20 template
-rw-r--r-- 1 root apps 0 Oct 30 13:29 testwrite
drwxrwx--- 20 apps apps 21 Oct 20 11:32 TV
root@proxmox:/mnt/lxc_shares/media#
root@proxmox:/mnt/lxc_shares/media# rm testwrite
root@proxmox:/mnt/lxc_shares/media#

From the container I can't even assess some of the mounted directories, other I can but cannot write to any of them

root@docker-arrs:/lxc_share# cd /lxc_share/media
-bash: cd: /lxc_share/media: Permission denied
root@docker-arrs:/lxc_share# cd /lxc_share/arrs
root@docker-arrs:/lxc_share/arrs# touch test
touch: cannot touch 'test': Permission denied
root@docker-arrs:/lxc_share/arrs

.conf file

arch: amd64
cores: 4
features: keyctl=1,nesting=1
hostname: docker-arrs
memory: 65536
mp0: /mnt/lxc_shares/arrs/,mp=/lxc_share/arrs
mp1: /mnt/lxc_shares/media/,mp=/lxc_share/media
mp2: /mnt/lxc_shares/arrdata/,mp=/lxc_share/arrdata
mp3: /mnt/lxc_shares/familyshare/,mp=/lxc_share/familyshare
mp4: /mnt/lxc_shares/old_docker/,mp=/lxc_share/old_docker
nameserver: 192.168.55.3
net0: name=eth0,bridge=vmbr0,hwaddr=bc:24:11:8e:00:29,ip=dhcp,type=veth
onboot: 1
ostype: debian
rootfs: cts:205/vm-205-disk-0.raw,size=250G
swap: 512
tags: proxmox-helper-scripts
unprivileged: 1
lxc.idmap: u 0 100000 568
lxc.idmap: g 0 100000 568
lxc.idmap: u 568 568 1
lxc.idmap: g 568 568 1
lxc.idmap: u 569 100569 64967
lxc.idmap: g 569 100569 64967


I updated my subuid and subgid files
root:100000:65536
root:568:1

I am at a complete loss on permissions, I have tried changing Maproot Group between root to apps in TrueNAS. Been reading all the documentation and trying for weeks but there's something I must not be grasping.
1730310618591.png
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!