secubox/secubox-deb
1
0
Fork 0
mirror of https://github.com/CyberMind-FR/secubox-deb.git synced 2026-07-29 09:14:33 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

fix(torrent): only add lxc.idmap if absent (default.conf already provides it; duplicate aborts container) (ref #917)

Browse Source 
Co-Authored-By: Gerald KERMA <devel@cybermind.fr>
This commit is contained in:
CyberMind-FR 2026-07-28 16:25:26 +02:00
parent 41b83eb5a2
commit 8dfcad291e
1 changed files with 9 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
packages/secubox-torrent/lxc/install-lxc.sh
View File

@ -37,10 +37,16 @@ if [ -f "$SENTINEL" ]; then log "already provisioned; skipping create"; else
# secubox-peertube).
lxc-create -n "$LXC_NAME" -t download -P "$LXC_PATH" -- \
--dist debian --release bookworm --arch "$(dpkg --print-architecture)"
# unprivileged idmap + static IP on br-lxc (config appended)
# idmap: the download template copies /etc/lxc/default.conf, which on gk2
# already provides the unprivileged u/g 0->100000 65536 mapping. Only add it
# if absent — a DUPLICATE mapping makes newuidmap fail ("write to uid_map
# failed: Invalid argument") and the container ABORTS at start.
if ! grep -q '^lxc.idmap' "$LXC_PATH/$LXC_NAME/config"; then
printf 'lxc.idmap = u 0 %s 65536\nlxc.idmap = g 0 %s 65536\n' \
"$LXC_ROOT_UID" "$LXC_ROOT_UID" >> "$LXC_PATH/$LXC_NAME/config"
fi
# static IP on br-lxc (config appended)
cat >> "$LXC_PATH/$LXC_NAME/config" <<EOF
lxc.idmap = u 0 $LXC_ROOT_UID 65536
lxc.idmap = g 0 $LXC_ROOT_UID 65536
lxc.net.0.type = veth
lxc.net.0.link = $LXC_BRIDGE
lxc.net.0.flags = up