Cockpit - File sharing needs Privileged LXC

[kipavy]

✅ Have you read and understood the above guidelines?

yes

📜 What is the name of the script you are using?

Cockpit

📂 What was the exact command used to execute the script?

bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/cockpit.sh)"

⚙️ What settings are you using?

• Default Settings
• Advanced Settings

🖥️ Which Linux distribution are you using?

Debian 13

📈 Which Proxmox version are you on?

9.0-1

📝 Provide a clear and concise description of the issue.

Hi, so basically just wanted to create an NFS share and noticed it didn't work with default script settings, here what I did:

systemctl status nfs-server

I got

Oct 30 19:17:39 debian systemd[1]: Dependency failed for nfs-server.service - NFS server and services. Oct 30 19:17:39 debian systemd[1]: nfs-server.service: Job nfs-server.service/start failed with result 'dependency'.

I tried to recreate Cockpit LXC in Privileged mode and it worked, so I think this should be default setting, at least when using 45Drives.

🔄 Steps to reproduce the issue.

1. Create Cockpit LXC with 45Drives bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/cockpit.sh)"
2. Add a New NFS Share
3. See the error systemctl status nfs-server

❌ Paste the full error output (if available).

Oct 30 19:17:39 debian systemd[1]: Dependency failed for nfs-server.service - NFS server and services. Oct 30 19:17:39 debian systemd[1]: nfs-server.service: Job nfs-server.service/start failed with result 'dependency'.

🖼️ Additional context (optional).

No response

[burgerga]

Thanks for your report! Several issues here:

• 45Drives is not the default
• I use 45Drives unprivileged because I only need smb
• privileged/unprivileged LXC is created before the 45Drives choice is made, so by that point it's too late to change

So I don't think privileged should be the default.
We could maybe add a note to https://community-scripts.github.io/ProxmoxVE/scripts?id=cockpit to tell people to use privileged if they want 45Drives with NFS. What do other @community-scripts/contributor think?

(That reminds me, I should add a note that if you want to use 45Drives extensions you should run the script with var_version=12 because not all features of 45Drives work with Debian 13)

[tremor021]

Priviledged vs Unpriviledged is really left up to the user. If the feature clearly depends on container running as priviledged, we will add a note on the webpage. I'm using NFS on my host with mountpoints, never had issues with it. Not sure why 45drives need to have it priviledged...

Can someone else confirm this? Is this really a must?

[burgerga]

@tremor021 Are you sharing NFS shares to your LXCs or from your LXCs? Because the latter is the issue here. I do think sharing NFS shares from your LXC can indeed only be done from a privileged LXC (or VM), see https://forum.proxmox.com/threads/nfs-server-in-lxc.105073.

[kipavy]

Yes a Note would be enough I guess. Thanks

[tremor021]

@tremor021 Are you sharing NFS shares to your LXCs or from your LXCs? Because the latter is the issue here. I do think sharing NFS shares from your LXC can indeed only be done from a privileged LXC (or VM), see forum.proxmox.com/threads/nfs-server-in-lxc.105073.

I'm mounting NFS shares from my NAS into the host, then mountpoint into LXC.

[burgerga]

Ah yes, this is about the other direction, having an LXC with the NAS duty of creating shares and managing permissions.

[CrazyWolf13]

I don't think we set this as default, a lot of people map shares through the host then passthrough, which works fine for unpriviledged LXC.

I rather see this as a "limitation" of proxmox so I think we should leave it as is, but add a note for people that don't know this limitation, that they should use advanced mode with priviledged mode.

@burgerga It's quite easy to change priviledged mode afterwards, see: https://forum.proxmox.com/threads/change-lxc-from-unprivileged-back-to-privileged.65552/

[burgerga]

Agree! And good point about changing it afterwards.
I can PR the notes, I need to create one about Debian 12 anyways.