LXC nesting + lxc command access

Sep 15, 2025
5
0
1
Hi,
I'm starting to setup a LXC to run the Forgejo action runner and have a few questions. I haven't used LXC nesting at all and couldn't find the answers searching. I then looked in the Proxmox docs and found that nesting is enabled by default, but nothing about access to lxc functions of the host or resource usage while nesting.

1. When the parent LCX creates new LXC, are the resources shared between containers? The parent container has 6 cores and 8 gb of ram, is this shared with any nested containers?

2. How in Proxmox do I allow the parent container access to the `lxc-` commands of the host? From the Forgejo docs, they reference a helper script to create the parent LXC container. I assumed I shouldn't do this, am I wrong?

From the Forgejo Runner docs:

**LXC:** For jobs to run in LXC containers, the `Forgejo runner` needs passwordless sudo access for all `lxc-*` commands on a Debian GNU/Linux `bookworm` system where [LXC](https://linuxcontainers.org/lxc/) is installed. The [LXC helpers](https://code.forgejo.org/forgejo/lxc-helpers/) can be used as follows to create a suitable container

Thank you!