Mounting disk to unprivileged container

jriley

New Member
Feb 5, 2023
5
0
1
Sorry for what I'm sure is an exceedingly stupid question, but is this an insecure way to mount an external disk to an unprivileged container? I added this to /etc/fstab, the disk mounts at boot, and I have rwx permissions as the user with ID 101000 in the container:

Code:
UUID=XXXX-XXXX /mnt/files exfat defaults,uid=101000,gid=101000,fmask=0077,dmask=0077 0 0

and added

Code:
mp0: /mnt/files,mp=/mnt/files

to the containers conf file in /etc/pve/lxc


edit:

Well I'm not certain this is 100% secure but it's not a serious application so it's nbd in my opinion.

In the container I have a user whose UID/GID is 101000 on the host, so in /etc/subuid and /etc/subgid I added
Code:
user:101000:1
that way nothing else will get 101000. This way, no one has any permissions to the mounted disk on the host, or the container except the user.

Interested in knowing if this is a bad/dumb idea, let me know ty
 
Last edited: