[SOLVED] Passing USB device on LXC not working after upgrade to 7.0

[dksoft]

Dear PVE-friends,

since I upgraded to PVE 7 (LXC 4.0) I can not pass USB device to my priviledged LXC container.
Maybe someone has an idea what's wrong in the configuration from PVE 6:

On the host:

root@pve:/dev# ls -l /dev/ttyU*
crw-rw-rw- 1 root dialout 188, 0 Jul  8 11:46 /dev/ttyUSB0
crw-rw-rw- 1 root dialout 188, 1 Jul  8 11:46 /dev/ttyUSB1

Extract from client configuration:

lxc.cgroup.devices.allow: c 188:* rwm
lxc.mount.entry: /dev/ttyUSB0 dev/ttyUSB0 none bind,optional,create=file
lxc.mount.entry: /dev/ttyUSB1 dev/ttyUSB1 none bind,optional,create=file

On the client:

srv:dev# ls -l ttyU*
crw-rw-rw- 1 root dialout 188, 0 Jul  8 11:46 ttyUSB0
crw-rw-rw- 1 root dialout 188, 1 Jul  8 11:46 ttyUSB1
srv:dev# cat ttyUSB1
cat: ttyUSB1: Operation not permitted
srv:dev#

 

[oguz]

hi,

you can change this line:

lxc.cgroup.devices.allow: c 188:* rwm

to:

lxc.cgroup2.devices.allow: c 188:* rwm

because of the new default cgroup version in PVE7 [0]

[0]: https://pve.proxmox.com/pve-docs/chapter-pct.html#pct_cgroup_compat

 

[dksoft]

Works, thank you very much oguz!

 

[Dezorian]

I got mine fixed by the following (needed that chown line for it to get it working)

$ nano /etc/pve/lxc/123.conf

change or add the following lines

lxc.cgroup2.devices.allow: c 10:200 rwm
lxc.mount.entry: /dev/net dev/net none bind,create=dir

For your unprivileged container to be able to access the /dev/net/tun from your host, you need to set the owner by running

$ chown 100000:100000 /dev/net/tun