Unable to re-mount /proc in Proxmox 3 containers?

Jan 26, 2011
82
2
6
Recently I discovered that the default /proc mount inside CentOS containers running under Proxmox 3.1 were mounted insecurely:

# mount|grep " /proc"
proc on /proc type proc (rw,relatime)

Under older versions of Proxmox, I was able to correct this by running:

mount -o remount,nosuid,noexec /proc

However, when running under Proxmox 3.1, the above returns:

mount: mount failed

Anyone here aware of a fix for this?

Thanks,

Curtis
 
I got distracted for a bit and am finally getting back to this.

Are you saying that lxc.mount.auto can be used in an openvz configuration file? In my googling, I'm only seeing examples of it being used in lxc container configs.

There must be some way to mount /proc in a secure way in OpenVZ.

Curtis