1

Setting up Samba-4.3.5 as AD domain fileserver in OpenVZ container, running in ProxMox (pve-manager/3.4-6/102d4547 running kernel: 2.6.32-39-pve). Hardware node has enabled acl support for /var/lib/vz. Nevertheless, container has no acl support. So, any setfacl command does nothing.

How enable acl and xattr support in container?

2
  • 1
    Please post an answer. Editing the question is for adding additional information, to clarify it, or to repair it, not for answering it.
    – Celada
    Commented Mar 21, 2016 at 21:56
  • Putting SOLVED in the title in not the right way to finish a question, please click the check next to the response that answers your question. If you don't it will end up in the "unsolved" queue. Commented Nov 10, 2016 at 19:21

1 Answer 1

0

Added to /etc/pve/openvz/VMID.conf

MOUNT_OPTS="rw,realtime,acl,user_xattr"  

Did the thing. Now (for example)

setfacl -m u:sshd:rwx ~/tmp
setfacl -m g:ssh:rwx ~/tmp

and then

getfacl ~/tmp

shows

 # file: root/tmp
 # owner: root
 # group: root
user::rwx
user:sshd:rwx
group::r-x
group:ssh:rwx
mask::rwx
other::r-x

So, ACL is OK

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .