Published on

Permission errors using snapd in LXC containers

153 words1 min read

When trying to run snapd in an LXC container, you may get the following error:

error: system does not fully support snapd: cannot mount squashfs image using "squashfs": mount:
       /tmp/sanity-mountpoint-517447097: mount failed: Operation not permitted.

For unprivileged containers:

  • Update /etc/pve/lxc/$vmid.conf and add the following two lines
features: mount=fuse,nesting=1
lxc.mount.entry = /dev/fuse dev/fuse none bind,create=file 0 0
  • Reboot the container
  • Inside the container run apt install snapd

For privileged containers, also add:

# We need to allow apparmor administration, by default mac_admin is dropped for privileged containers.
# Note that you do not want this for un-trusted containers...
lxc.cap.drop =
lxc.cap.drop = mac_override sys_time sys_module sys_rawio