Yet another LXC UID/GID mapping thread

RoboBird

New Member
Jun 17, 2024
1
0
1
I have read through this (https://pve.proxmox.com/wiki/Unprivileged_LXC_containers) and several threads about unprivileged lxc containers and UID mapping. I am still confused.

I created an unprivileged LXC container for a samba share of a local zfs dataset. I didn't add any UID maps, "lxc.idmap..." to the lxc .conf.

I didn't make any changes to /etc/subuid or /etc/subgid.

I created a user on the host with the UID 101000 and a group with GID 110000, and a user on the LXC with UID 1000 (part of a group with UID 1000 as well)

I used chown -r to change ownership to the user on the host.

It seems to work, but since I didn't do any of the lxc.idmap stuff, or the /etc/subuid changes, I'm thinking maybe I did it wrong or made it less secure?
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!