Auditing LXC containers

Sep 19, 2018
Hello! I implement a PVE setup with several LXC containers and I need to audit this containers. I tried to install `auditd` and `auditbeat` and had no luck. It seems like these solutions don't work in containers. Is anybody know a working approach for auditing LXC containers? Thanks.
2,5 years later. We are working on the same problem. At the moment, we resorted back to auditing the host system and correlate audit messages to their respective containers. Auditing in container might be possible by applying CAP_AUDIT or CAP_AUDIT_CONTROL to the container thus giving them control over the hosts complete audit system which might or might not be a bad idea.


The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!