Linux 5.12 - ID Maping for Unprivileged CTs!

[harvie]

https://kernelnewbies.org/Linux_5.12#ID_mapping_in_mounts

They just released Linux 5.12, which can remap UIDs/GIDs of mountpoints.
This is absolutely awesome feature which would mean that we don't really need to backup/restore or otherwise convert CT's filesystem when switching containers between privileged and unprivileged mode (where root has to be remapped to higher IDs).

Can you please integrate this feature to proxmox? Idealy in way that it would work both on ZFS, LVM and EXT4?

 

[dcsapak]

since current pve 6.x are by default on kernel 5.4 and the most recent kernel we ship for the foreseeable future is 5.11, it will take a while until that feature lands in a pve kernel. when we sometime ship a kernel with those features, we may want to integrate it

i suggest, opening a feature request on https://bugzilla.proxmox.com but please have in mind that it may take a while (or maybe we do not want to integrate it at all)

 

[harvie]

OK I've created ticket in bugzilla: https://bugzilla.proxmox.com/show_bug.cgi?id=3397

BTW can't really think about any downsides/drawbacks of using this for LXC. Do you have any?

 

[gechu]

https://github.com/fabianishere/pve-edge-kernel

I've not tried it