Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow unprivileged lxc creation #221

Open
wandrewromano opened this issue Jan 12, 2022 · 0 comments
Open

Allow unprivileged lxc creation #221

wandrewromano opened this issue Jan 12, 2022 · 0 comments
Labels
enhancement New feature or request
Milestone

Comments

@wandrewromano
Copy link

Is your feature request related to a problem? Please describe.
Proxmox can create unprivileged LXCs that use a separate namespace for uid's and gid's within the container. This can help mitigate container escape issues by mapping to an unprivileged user account. Currently the unprivileged parameter is unset and defaults to false.

Describe the solution you'd like
I think the ideal solution would be a checkbox that can allow a user to choose if an unprivileged container should be created during the build process.

Describe alternatives you've considered
Containers can be manually backed up and restored through Proxmox to change their privileged status.

Thank you for your work on this project.

@tristanrobert tristanrobert added the enhancement New feature or request label Dec 15, 2022
@tristanrobert tristanrobert added this to To do in ForemanFogProxmox plugin via automation Dec 15, 2022
@tristanrobert tristanrobert added this to the Not planned milestone Dec 15, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
Development

No branches or pull requests

2 participants