[Failure] restoring unprivileged container from backup ending in error 1 on device 'random'

proxnoci

Member
Jan 15, 2023
54
6
13
The issue has been mentioned before dated in 2024. without some real resolution.

Full error:
Error: error extracting archive - encountered unexpected error during extraction: error at entry "random": failed to extract device: failed to create device node: Operation not permitted (os error 1)

Code:
recovering backed-up configuration from 'PBS1-NEXTCLOUD:backup/ct/114/2025-04-18T02:14:03Z'
Formatting '/mnt/pve/PVE/images/114/vm-114-disk-1.raw', fmt=raw size=21474836480 preallocation=off
Creating filesystem with 5242880 4k blocks and 1310720 inodes
Filesystem UUID: 8e5a4107-c090-43ff-baf8-fc6c21b7bac2
Superblock backups stored on blocks:
    32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,
restoring 'PBS1-NEXTCLOUD:backup/ct/114/2025-04-18T02:14:03Z' now..
progress 2% (317.687 MiB of 10.841 GiB in 5s, 63.421 MiB/s)
progress 6% (737.661 MiB of 10.841 GiB in 15.4s, 40.325 MiB/s)
Error: error extracting archive - encountered unexpected error during extraction: error at entry "random": failed to extract device: failed to create device node: Operation not permitted (os error 1)
TASK ERROR: unable to restore CT 114 - command 'lxc-usernsexec -m u:0:100000:65536 -m g:0:100000:65536 -- /usr/bin/proxmox-backup-client restore '--crypt-mode=none' ct/114/2025-04-18T02:14:03Z root.pxar /var/lib/lxc/114/rootfs --allow-existing-dirs --repository backup@pbs@pbs.noci.lan:PBS1 --ns NEXTCLOUD' failed: exit code 255
Plain select backupfile, restore button select Storage to the right one & restore on the popup


History of the container: Created as a non privileged container, running Collabora Document server. has been running for some time, so it had several apt update && apt full-upgrade seen during this period.

Reason for restore: might be infected due to php issues, unsure, so preventive restore from image of a few months old.

I did find there is an bz issue for this https://bugzilla.proxmox.com/show_bug.cgi?id=5654 that has no solution. (It has not been looked into even, state NEW since 2024).

apparently the 'random' device is forbidden in images, yet the device has been created outside of backup/restore control.
I dislike the option to have an UNprivileged container to be upgraded to privileged for this. (will attempt a privileged restore after this)
Why can such a device be created during runtime, if it disallowed?
It would be a lot better to allow restore and remove all forbidden parts later? or "fake" the restore with a warning.


On the other hand, the BACKUP software could warn for this case and NOT backup the offending items.
For now the backup (or rather restore) of unprivileged images is unreliable.

Curious to what resolution other have to this issue

Update: The privileged image never starts... Start mentions OK, it just doesn't start.
Update2: lxc -F -n 114 does not actualy show any output.
Update3: Added debug: 1 to the config file as well as unprivileged: 1 after this the container and removing ,mknod=1 DOES start with lxc -F -n 114....
Still pct start 114 & starting from WUI doesn't do anything but say OK on hastart ....
 
Last edited:
This error likely happens because the unprivileged container cannot recreate the random device file during restore.

Check the backup to find its exact location. If it belongs to Postfix, check its chroot setup and remove the device file from the backup if it is not needed. Then create a new backup and try restoring it again.

Avoid switching to a privileged container just to fix the error. Check the full restore log to confirm the cause.

References:
- Proxmox Container documentation
- Proxmox Container configuration