[SOLVED] Problem mapping access r/w to bind mount into unprivileged LCX container

Sofa Surfer

New Member
Jul 31, 2023
7
0
1
Hi everyone,

I have read the official docs and many post/threads/tutorial about this problem that many people had, but still can't get out of my situation:

I have my PVE installed in a minipc, I have a VM with OMV, with a SMB share folder. I can see and edit my folders from a Windows laptop. I have bind mounted my folder in the PVE and I can do the same from console. Later I have added an LXC container running DOCKER, with a stack of 3 containers: Portainer, Plex and Frigate. I have configured Plex to use my shared folder as server, it works fine and I can see my media. When I have installed Frigate I decided to use my OMV shared folder to save my surveillance clips and recordings, to be able to check and move them easily. I realised the I can see the folders but I have no permission to create/write a file.
Did one step back, I noticed I can't write from Docker console and I'm starting from this point.
I - think I - understand the mapping rules but I can't solve it. I have read that my frigate should access to my bind mount as root. I haven't created any group/user because it's an home installation and at the moment I don't need it, and I don't want to complicate much my things.
If I browse my folder from the PVE:

Code:
root@pve# ls -l /mnt/pve/omv
total 0
drwxr-xr-x 2 root root 0 Sep 16 12:33 Media
drwxr-xr-x 2 root root 0 Aug 14 14:51 images
drwxr-xr-x 2 root root 0 Sep 1 21:40 frigate

while from the guest:

Code:
root@docker# ls -l /mnt/pve/omv
total 0
drwxr-xr-x 2 nobody nogroup 0 Sep 16 10:33 Media
drwxr-xr-x 2 nobody nogroup 0 Sep 1 19:40 frigate
drwxr-xr-x 2 nobody nogroup 0 Aug 14 12:51 images

when I try to create a file:

Code:
root@docker ~# touch /mnt/pve/omv/x.txt
touch: cannot touch '/mnt/pve/omv/x.txt': Permission denied

1) my FSTAB is this:
Code:
//20.20.1.8/omv /mnt/pve/omv cifs username=xxxxx,password=xxxxx,iocharset=utf8,vers=3.0,noperm,uid=100000,gid=100000,file_mode=0777,dir_mode=0777 0 0

2) I have mapped my UID/GID in my my /etc/pve/lxc/100.conf:
Code:
..
mp0: /mnt/pve/omv,mp=/mnt/pve/omv
unprivileged: 1
lxc.idmap: u 0 100000 65534
lxc.idmap: g 0 100000 65534
..

3) My subuid and subgid are:
Code:
root:100000:65536
media:165536:65536
root:1000:1

4) finally I run:
Code:
chown -R 100000:100000 /mnt/pve/omv

but my shared folder are still "nogroup/nouser" and can't write!

Of course before I have tried the setup of the official doc without success!
https://pve.proxmox.com/wiki/Unprivileged_LXC_containers

Can someone explain me what's wrong?!?

UPDATE:
Solved using ONLY the official doc. Always shutdown the CT when modify the config files, and check if the shared folder is mounted only one time!
 
Last edited: