Sorry for what I'm sure is an exceedingly stupid question, but is this an insecure way to mount an external disk to an unprivileged container? I added this to /etc/fstab, the disk mounts at boot, and I have rwx permissions as the user with ID 101000 in the container:
and added
to the containers conf file in /etc/pve/lxc
edit:
Well I'm not certain this is 100% secure but it's not a serious application so it's nbd in my opinion.
In the container I have a user whose UID/GID is 101000 on the host, so in /etc/subuid and /etc/subgid I added
that way nothing else will get 101000. This way, no one has any permissions to the mounted disk on the host, or the container except the user.
Interested in knowing if this is a bad/dumb idea, let me know ty
Code:
UUID=XXXX-XXXX /mnt/files exfat defaults,uid=101000,gid=101000,fmask=0077,dmask=0077 0 0
and added
Code:
mp0: /mnt/files,mp=/mnt/files
to the containers conf file in /etc/pve/lxc
edit:
Well I'm not certain this is 100% secure but it's not a serious application so it's nbd in my opinion.
In the container I have a user whose UID/GID is 101000 on the host, so in /etc/subuid and /etc/subgid I added
Code:
user:101000:1
Interested in knowing if this is a bad/dumb idea, let me know ty
Last edited: