PVE - Fix LXC docker
Fix pour la CVE-2025-52881.
Symptomes:
OCI runtime create failed: unable to start container process: error during container init: open sysctl net.ipv4.ip_unprivileged_port_start file: reopen fd 8: permission denied
RĂ©solution :
echo "lxc.apparmor.profile: unconfined" >> /etc/pve/lxc/{ID}.conf
echo "lxc.mount.entry: /dev/null sys/module/apparmor/parameters/enabled none bind 0 0" >> /etc/pve/lxc/{ID}.conf
echo "lxc.cgroup2.devices.allow: c 10:200 rwm" >> /etc/pve/lxc/${ID}.conf
echo "lxc.mount.entry: /dev/net/tun dev/net/tun none bind,create=file" >> /etc/pve/lxc/${ID}.conf
pct reboot ${ID}
Autres sources: https://github.com/jq6l43d1/proxmox-lxc-docker-fix