Change mount point's options

[mackuz]

Hello.

Is there a way to change mount point's options on LXC container's startup?

I need it because of kernel module, installed in one container only, needed for commercial Wine's version to mount CIFS resources.

 

[fabian]

what kind of mountpoint options? please post clear, specific questions, otherwise it is not possible to answer them..

 

[mackuz]

Sorry.

I need to mount a CIFS folder. And I need to use a specific option "wine":

//192.168.10.2/change /mnt/change cifs credentials=/etc/credentials1,rw,iocharset=utf8,noperm,wine,nounix,nostrictsync 0 0

I have installed an etercifs package, which is needed for Wine@Etersoft, a custom Wine installation, I use for some apps to work. This package contains a kernel module. So I can't simply mount CIFS folder on the host and attach it to container in /etc/pve/lxc/100.conf, without installing etercifs on the host.
Do I need to mount it in container's fstab?

 

[fabian]

kernel modules are shared between the host and the containers, so for security reasons containers are not allowed to load modules (by default). I would recommend to run such setups in a VM, because giving a container all the needed permissions means disabling a lot of the security features that isolate the container from the host - especially since you presumably then want to run proprietary software where you have no idea what it actually does under the hood

 

[mackuz]

With LXC I have better performance. Am I right?
So can I install this module on the host, mount share on it and create mp to it in a container?

 

[fabian]

yes, you can install the module on the host, mount the cifs share on the host and then bind mount it into the container.

 

[mackuz]

Thank You for Help!

 

[mackuz]

Oh! And will I need to do something in the container, with it's kernel, after that module will be installed on the host system?

 

[mackuz]

Upd. It's all working fine, thank You again.