Fixed NFS access inside unprivileged LXC, but am I doing it right ?
I used to have a working setup for giving access to an NFS share inside an unprivileged LXC but after doing a couple of maintenance updates and probably careless config tinkering, it stopped working and I was back with the nouser:nogroup issue. I went down the rabbit hole and managed to kind of fix it:
- The NFS share is owned by 1000:1000 once mounted on the Proxmox host. I created a mount point for the LXC with idmaps like it is suggested in the documentation for id/gid 1000:1000. The issue though, is that I already have a user with those ids and use it instead of root.
- Doing so made the user with id/gid 1000:1000 inside the container not being able to login. I mounted the container rootfs on host and chowned it's home to 1000:1000 to match the idmaps.
- Now my mount point works as expected.
I'm wondering if that's the best way to do it since it seems like I managed to make it work differently last time, I just can't remember how I fixed these issues.
My NFS export options are:
anongid=1000, anonuid=1000, async, insecure, no_all_squash, no_root_squash, no_subtree_check, rw
Posted May 8, 2026, 3:53 PM UTC
117