Comment on Jellyfin on Proxmox
walden@sub.wetshaving.social 11 months agoI wonder, after making these changes is it the same security wise as making the container unprivileged=0?
Comment on Jellyfin on Proxmox
walden@sub.wetshaving.social 11 months agoI wonder, after making these changes is it the same security wise as making the container unprivileged=0?
revv@lemmy.blahaj.zone 11 months ago
Nope. It just maps a single user and group from the container to a regular user on the host. With the above config, root in the container has the “real” UID of 100000. It can’t make changes to anything any other unprivileged user can. A privileged container otoh runs root as root. It can do a lot of damage. By running privileged containers you’re kind of throwing out a good portion of LXC’s benefits.
walden@sub.wetshaving.social 11 months ago
That makes sense. Thanks.