Unprivileged LXC containers — by Proxmox Server Solutions (Proxmox VE wiki)

advancedpageLink only (©)

Explains how container UIDs/GIDs are shifted by 100000 on the host, why bind-mounted files appear as nobody inside the container, and how to fix it with lxc.idmap lines, matching /etc/subuid and /etc/subgid entries, and host ownership changes.

Quick steps

pct set <ct-id> -mp0 /host/path,mp=/ct/path
Add lxc.idmap u and g lines to /etc/pve/lxc/<ct-id>.conf
Add root:<uid>:1 (the ID you pass through, e.g. 1005) to /etc/subuid and /etc/subgid, then chown the host path to that ID

Paraphrased from the source. Menus can differ by version, so check the original for full details.

Read the full article on pve.proxmox.com

Source: Unprivileged LXC containers by Proxmox Server Solutions (Proxmox VE wiki). Licence: Link only (©).

Source reviewed: 2026-11-02
Link checked: 2026-11-02
Tested hands-on: Not by Oddbyte.Me

proxmoxlxcbind mountuid mapping

More in Virtual Machines

Installation - Proxmox VE — by Proxmox Server Solutions (Proxmox VE wiki)

beginnerpage

Wiki page covering the Proxmox VE installer: boot the installer, pick a target disk and filesystem (ext4, xfs, ZFS, or btrfs as a tech preview), set the root password and network, then manage it at https://<ip>:8006. The install wipes the selected drives, and ZFS on top of hardware RAID is not supported.

UTM Documentation: macOS install — by UTM

beginnerpage

How to install UTM, the virtual machine app for Mac. The Mac App Store version gets automatic updates, while the GitHub DMG is the same build you update by hand. Your VMs are kept when you update, and macOS 11 users are limited to v4.7.5.

VirtualBox Manual: Virtual Networking — by Oracle VirtualBox

intermediatepage

Describes VirtualBox network modes: NAT (default, outbound only unless you add port forwarding), bridged, internal, host-only and NAT network. Pick bridged when the VM must be a full peer on your LAN, and NAT when it only needs internet access.