meta data for this page
  •  

This is an old revision of the document!


Controller

Docker

  • Works correctly only with host type networking = no network separation

In unprivileged LXC

https://wiki.debian.org/LXC

apt-get install lxc

Create user:

sudo useradd -s /bin/bash -c 'Unifi lxc user' -m unifi
sudo passwd unifi

Find subuids and subgids for created user

sudo grep unifi /etc/sub{gid,uid}
/etc/subgid:unifi:1738400:65536
/etc/subuid:unifi:1738400:65536

Allow new user create network interfaces:

/etc/lxc/lxc-usernet
lxcgitlab veth br-lan 10

man 5 lxc-usernet

Now login as new user (using ssh or su). Create default lxc configureation in user directory:

mkdir -p ~/.config/lxc
cp /etc/lxc/default.conf ~/.config/lxc/default.conf

Edit file below and put subuid and subgid:

~/.config/lxc/default.conf
...
lxc.network.link = br-lan
lxc.id_map = u 0 1738400 65536
lxc.id_map = g 0 1738400 65536
...

Create container:

lxc-create -t download -n unifi

Issues

Error: lxc-create: unifi: confile.c: set_config_net: 261 lxc.net must not have a value

LXC3 is using different config keys. Easiest way is to convert config file:

lxc-update-config -c default.conf