Running docker in an unprivileged devuan lxc container (on proxmox)
2
votes
1
answer
79
views
I am configuring a single-node proxmox server for use as a home server/homelab. I am looking to run many of my generic applications (like immich, jellyfin, etc) in docker containers, which could all run within a linux lxc container. I understand that proxmox does not recommended to run docker in an lxc container, and instead to use a VM, but VMs take constant allocated resources to run, which doesn't fit well with a docker host setup in my opinion.
I am also interested in using devuan linux in an unprivileged lxc container to host the docker applications. I am not here to argue distribution selection either, I would just prefer to use this distribution if possible.
Unfortunately, when I try to install docker in an unprivileged devuan lxc container (using the guide for debian 12, the basis for devuan 5), installation via apt fails due to the docker service not being able to start. The specific error I get is:
/etc/init.d/docker: 69: ulimit: error setting limit (Operation not permitted) invoke-rc.d: initscript docker, action "start" failed.
I assumed this was a limitation of running the devuan lxc container as unprivileged, and that this was a kernel permissions issue. However, when I created an Ubuntu 24.04 lxc container with the same configuration (unprivileged with nesting) I was able to install docker-ce completely and run the docker run hello-world
command successfully. My remaining questions are as follows:
1. Why am I able to install docker engine successfully in an unprivileged ubuntu lxc container, but not a devuan container with an identical configuration?
2. Can I configure my devuan container to allow docker to run without compromising security by escalating privilege?
3. If not, is there a way I can install docker in a 'rootless' mode that would allow it to run in an unprivileged devuan container?
Asked by hdconway
(23 rep)
Aug 7, 2025, 01:55 PM
Last activity: Aug 8, 2025, 03:46 PM
Last activity: Aug 8, 2025, 03:46 PM