/etc/lxc/default.conf not included on LXC create

[eb8]

hi,
I tried to set some default entries (cgroup for tun/tap and mount) in /etc/lxc/default.conf, /etc/lxc/lxc.conf and ~/.config/lxc/lxc.conf, but non of this get's included on LXC create, for both, priv. and nonpriv. types

cat /etc/lxc/default.conf
conf:lxc.cgroup.devices.allow = c 10:200 rwm
lxc.cgroup.devices.allow = c 10:200 rwm
lxc.mount.entry = /dev/net/tun dev/net/tun none bind,create=file

all files have the same lines.
I also commented the first line, cause it was only a try.

PVE: 5.4-1 (latest)

any hints?

TIA
guenter

 

[lhorace]

Hello there,

Have look at https://forum.proxmox.com/threads/persistent-lxc-container-options.28648/.

Regards

 

[oguz]

hi,

you can try editing the `/usr/share/lxc/config/common.conf` file. but be aware that the changes will be applied to all containers system-wide.

Have look at https://forum.proxmox.com/threads/persistent-lxc-container-options.28648/.

that thread is mostly about custom mount options (i.e. atime/noatime etc.), which is being considered

 

[eb8]

thanks for the answer.
I found tons of hints, to put my adds into /etc/lxc/default.conf – all wrong!
@oguz, why are so often reoccurring topics not part of the how-to section?
i.e. tun/tap on non-/privileged container, LXC-defaults, VM-name in the backups, etc?
it's very tedious to read hundreds of threads with wrong/outdated info.

 

[oguz]

@oguz, why are so often reoccurring topics not part of the how-to section?
i.e. tun/tap on non-/privileged container, LXC-defaults, VM-name in the backups, etc?
it's very tedious to read hundreds of threads with wrong/outdated info.

it really is tedious, i've been keeping personal notes for some tidbits of informations that i always look up. i'll take a look at getting those into the wiki.

what else would you like to see?

 

[eb8]

@oguz, sorry for late reply, been very busy…

* docker/containerd in LXC
* nested virt. I have found a link to the wiki in the forum, but no link in the How-To section.
* what else is documented but hidden?

I might add to this in time…, or, if you prefer, you could open a new topic and ask the community what they want to see there and to provide their how-tos & most wanted personal notes.

are there any ansible roles/playbooks supported by proxmox? if not & you plan to do, the really helpful debops.org would be a good starting point/integration framework.

 

[oguz]

I might add to this in time…, or, if you prefer, you could open a new topic and ask the community what they want to see there and to provide their how-tos & most wanted personal notes.

i'd still be cautious about adding unrelated stuff to our documentation... we want to document our software in the end and not have thousand how-to guides for unrelated stuff like joomla or whatever (just saying this because this is what happened in the past on our wiki, it still needs to be cleaned up of old stuff)

i'll see what i can do

 

[eb8]

I understand, but I meant only PVE-related stuff, not what's running in the VMs/LXCs, except things like docker/VPN, which need special configuration.
but I think you got my intention.

thanks in advance

 

[BobhWasatch]

Docker and VPN work perfectly fine in a VM. No special configuration needed. Why do people insist that they run in containers? Seems like a lot of hassle to save a few resources.