Problem starting LXC container after mapping user to allow writing to NAS mnt

[DoorTruck]

I am trying to make my docker LXC host be able to read/write to my external NAS

So I have this /etc/pve/lxc/101.conf

arch: amd64
cores: 8
features: keyctl=1,nesting=1
hostname: docker
memory: 16384
mp0: /mnt/samba/SeagateExternal,mp=/mnt/SeagateExternal
mp1: /mnt/samba/Backup,mp=/mnt/Backup
net0: name=eth0,bridge=vmbr0,hwaddr=BC:24:11:A7:71:25,ip=dhcp,type=veth
onboot: 1
ostype: debian
rootfs: local-lvm:vm-101-disk-0,size=500G
swap: 512
tags: community-script;docker
unprivileged: 1
lxc.idmap: u 0 100000 1000
lxc.idmap: u 1000 1000 2000
lxc.idmap: u 65534 165534 1
lxc.idmap: g 0 100000 100
lxc.idmap: g 100 100 1
lxc.idmap: g 101 100100 899
lxc.idmap: g 1000 1000 2000
lxc.idmap: g 65534 165534 1

And

/dev/pve/root / ext4 errors=remount-ro 0 1
UUID=4125-B369 /boot/efi vfat defaults 0 1
/dev/pve/swap none swap sw 0 0
proc /proc proc defaults 0 0
//192.168.1.146/SeagateEkstern1 /mnt/samba/SeagateExternal cifs username=server,password=xxxx,uid=1029,gid=100 0 0
//192.168.1.146/Disk2_3tb /mnt/samba/Backup cifs username=server,password=xxxxx,uid=1029,gid=100 0 0

But when I try to start the LXC container I get this error after I added all the
lxc_map_ids: 245 newuidmap failed to write mapping "newuidmap: uid range [1000-3000) -> [1000-3000) not allowed": newuidmap 1220 0 100000 1000 1000 1000 2000 65534 165534 1
lxc_spawn: 1795 Failed to set up id mapping.
__lxc_start: 2114 Failed to spawn container "101"
TASK ERROR: startup for container '101' failed

If I remove

lxc.idmap: u 0 100000 1000
lxc.idmap: u 1000 1000 2000
lxc.idmap: u 65534 165534 1
lxc.idmap: g 0 100000 100
lxc.idmap: g 100 100 1
lxc.idmap: g 101 100100 899
lxc.idmap: g 1000 1000 2000
lxc.idmap: g 65534 165534 1

The container starts just fine

And no I cant explain the idmap, I got it from a friend who had the same container ID for his docker container

 

[news]

Use a vm instead a lxc. Please search the forum, why.

 

[DoorTruck]

Use a vm instead a lxc. Please search the forum, why.

Thanks, but I would like to get LXC containers to work if possible.