Another “memo to self” …
[ Edit: minor change for Proxmox 5.x at bottom]
Having trouble doing an NFS mount from within a Proxmox LXC container? A google search took me here and it pretty much answers the question but doesn’t work with Proxmox 4.4-1. The error I was seeing after following the advice in the above was:
apparmor="STATUS" operation="profile_replace" profile="unconfined" name="lxc-container-default-cgns" pid=11339 comm="apparmor_parser"
So you also need to edit /etc/apparmod.d/lxc/lxc-container-default-cgns and make it look like so:
# Do not load this file. Rather, load /etc/apparmor.d/lxc-containers, which # will source all profiles under /etc/apparmor.d/lxc profile lxc-container-default-cgns flags=(attach_disconnected,mediate_deleted) { #include <abstractions/lxc/container-base> # the container may never be allowed to mount devpts. If it does, it # will remount the host's devpts. We could allow it to do it with # the newinstance option (but, right now, we don't). deny mount fstype=devpts, mount fstype=nfs, mount fstype=cgroup -> /sys/fs/cgroup/**, }
and then subsequently do:
service apparmor reload
Edit: On proxmox 5.2-1 the file is /etc/apparmor.d/lxc/lxc-default-cgns. The rest of the above is still correct.