[Tutorial] Mounting NFS share to an unprivileged LXC

Commands from step 7 (groupadd -g 10000 lxc_shares and usermod -aG lxc_shares root) aims to:
  1. Create a group named "lxc_shares" with GID 10000.
  2. Make the "root" user member of that new group (as a supplementary group, not changing it's primary group)
But the tutorial does not say:
  • Why GID is "10000"? Proxmox's Unprivileged LXC containers wiki page mentions an 100000 offset.
  • Where to execute those command:
    • on PVE host/node?
    • inside LXC? In such case they have to be adapted to the container's OS.
NB: I can access NFS share fine from PVE host/node.

---

Edit: According to @TheHellSite's tutorial, commands are to be executed in LXC.

So I've executed the 2 commands (their Alpine variant as my container is Alpine-based) for both LXC's root user and my first_user (UID 101).

My mp0 line is: mp0: /mnt/nfsshare/,mp=/foo.

But I get "ls: can't open '/foo': Permission denied" when I try to read the mountpoint with ls -al, both as root and first_user.

As "ls -dl /foo" shows, LXC's mountpoint is owned by nobody:nobody (UID=65534, GID=65534) with "0770/drwxrwx---" permissions:

Code:
# ls -dl /foo
drwxrwx---    4 nobody   nobody           4 Dec 25 23:23 /foo

According to this https://www.reddit.com/r/Proxmox/comments/1jmi7k1/permission_errors_in_an_unprivileged_lxc_after/ Reddit thread, I should have root:root as owner of the "/foo" mountpoint in LXC.

Stopping LXC, executing chown 100000:100000 /mnt/nfsshare on PVE host and restarting the LXC does not change anything (mountpoint "/foo" is still owned by nobody:nobody in LXC).
 
Last edited: