lxc_map_ids: 245 newuidmap failed to write mapping ...

[cphotor]

I reinstalled pve 9 and now I can't start lxc because of the following error:

lxc_map_ids: 245 newuidmap failed to write mapping "newuidmap: uid range [1000-1003) -> [1000-1003) not allowed": newuidmap 102951 0 100000 1000 1000 1000 5 1005 101005 64531
lxc_spawn: 1800 Failed to set up id mapping.
__lxc_start: 2119 Failed to spawn container "199"
startup for container '199' failed

The configuration in 199.conf is:

lxc.idmap: u 0 100000 1000
lxc.idmap: g 0 100000 1000
lxc.idmap: u 1000 1000 3
lxc.idmap: g 1000 1000 3
lxc.idmap: u 1003 101003 64533
lxc.idmap: g 1003 101003 64533

It doesn't work in PVE 9, but it works fine in PVE 8. If I change the number of users to a number less than 3, there will be no problem, for example:

lxc.idmap: u 0 100000 1000
lxc.idmap: g 0 100000 1000
lxc.idmap: u 1000 1000 2
lxc.idmap: g 1000 1000 2
lxc.idmap: u 1002 101002 64534
lxc.idmap: g 1002 101002 64534

I don't know why, but I do have 3 users. Can every body help me?

 

[fiona]

Hi,
how do your /etc/subuid and /etc/subgid look like? Do they allow 1003 to be used?

 

[cphotor]

Hi,
how do your /etc/subuid and /etc/subgid look like? Do they allow 1003 to be used?

In both file I wrote: root:1000:3. But in pve8, I forgot to fill this in and it also works.

I have three users, user1, user2, and user3, and their uids are 1000, 1001, and 1002. How should I set them up?

 

[cphotor]

I carefully read this post: https://forum.proxmox.com/threads/n...-1101-1100-1101-not-allowed.73414/post-417184
Then I changed both /etc/subuid and /etc/subgid on my PVE host to the following:

root:100000:65536
root:1000:3

Now they work, though I'm still not entirely sure what these two files are used for or how they should be written.