LXC permission issues, apt fails

[toma3757]

Hi!

I have the following configuration -- on the host:
On the host I have a user caller mediastorage with 110:117 (uid:gid) "who" owns /mnt/mediastorage.

root@proxmox:~# cat /etc/subuid
root:100000:65536
root:110:1
root@proxmox:~# cat /etc/subgid
root:100000:65536
root:117:1

root@proxmox:~# cat /etc/pve/lxc/102.conf
arch: amd64
cores: 4
hostname: plex
memory: 1024
mp0: /mnt/mediastorage,mp=/mediastorage
net0: name=eth0,bridge=vmbr0,firewall=1,gw=192.168.1.2,hwaddr=,ip=192.168.1.13/24,type=veth
ostype: debian
rootfs: local-lvm:vm-102-disk-0,size=8G
swap: 0
unprivileged: 1
lxc.idmap: u 0 100000 107
lxc.idmap: u 107 110 1
lxc.idmap: u 108 100108 64530
lxc.idmap: g 0 100000 115
lxc.idmap: g 115 117 1
lxc.idmap: g 116 100116 64530

The container is newly installed from the default debian 10.0 template, only added a user with 107:115 (uid:gid).
I would like to run apt update but i got the following errors:

root@plex:~# apt update
E: setgroups 65534 failed - setgroups (22: Invalid argument)
E: setegid 65534 failed - setegid (22: Invalid argument)
Reading package lists... Done
E: setgroups 65534 failed - setgroups (22: Invalid argument)
E: setegid 65534 failed - setegid (22: Invalid argument)
E: Method gave invalid 400 URI Failure message: Failed to setgroups - setgroups (22: Invalid argument)
E: Method gave invalid 400 URI Failure message: Failed to setgroups - setgroups (22: Invalid argument)
E: Method http has died unexpectedly!
E: Sub-process http returned an error code (112)

root@proxmox:~# pveversion
pve-manager/6.1-5/9bf06119 (running kernel: 5.3.13-2-pve

How can I solve this issue? Why it fails? Can somebody help me please?
Thanks!

 

[fiona]

Hi,
inside the container the group ID for the user _apt probably is 65534 (you can check in /etc/passwd). Try mapping this as well

lxc.idmap = g 65534 165534 1

and see if it works.

 

[thex]

worked like a charm for me