docker LXC error

[Jmanko16]

getting the following error when trying to install docker LXC. Not sure what this means. I get same error with both GitHub and gitea.

[ERROR] in line 159: exit code 0: while executing command "$@" > /dev/null 2>&1

[ERROR] in line 1345: exit code 0: while executing command lxc-attach -n "$CTID" -- bash -c "$(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVE/raw/branch/main/install/${var_install}.sh)"

[sir106]

may be related to that report: have noticed after upgrading docker to the latest version (docker-ce-cli/trixie,now 5:28.5.2-1debian.13trixie amd64) portainer_agent wont come up again.

when I try to start the portainer_agent (or portainer) following error pops up:

Error response from daemon: failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: open sysctl net.ipv4.ip_unprivileged_port_start file: reopen fd 8: permission denied: unknown
Error: failed to start containers: portainer_agent

the only solution I found was to change the lxc container config to make it priviledged and disable some security stuff:

/etc/pve/lxc/<CTID>.conf:

unprivileged: 0
features: nesting=1,keyctl=1
lxc.apparmor.profile: unconfined
lxc.cgroup2.devices.allow: a

after restarting the container a warning shows up, but portainer works again:
explicitly configured lxc.apparmor.profile overrides the following settings: features:nesting

[MickLesk]

Close Here. Its an official issue, we have an issue for this too. Its Not an discussion

#8890

[sir106]

thanks for pointing out; found it! for documentation links to the issues below:

opencontainers/runc#4968 and https://bugzilla.proxmox.com/show_bug.cgi?id=7006