Installing Passbolt in ProxMox LXC with OpenSuse 15.6 fails

Installation Issues
1

Hi

I have tried to install Passbolt Community Edition in a ProxMox LXC using the prebuild Repos for OpenSuse.

When executing “passbolt-repo-setup.ce.sh” I receive the following error:

sysctl: permission denied on key 'kernel.apparmor_display_secid_mode' sysctl: permission denied on key 'kernel.apparmor_restrict_unprivileged_io_uring' sysctl: permission denied on key 'kernel.apparmor_restrict_unprivileged_userns_complain' sysctl: permission denied on key 'kernel.apparmor_restrict_unprivileged_userns_force' sysctl: permission denied on key 'kernel.cad_pid' sysctl: permission denied on key 'kernel.unprivileged_userns_apparmor_policy' sysctl: permission denied on key 'kernel.usermodehelper.bset' sysctl: permission denied on key 'kernel.usermodehelper.inheritable' sysctl: permission denied on key 'vm.mmap_rnd_bits' sysctl: permission denied on key 'vm.mmap_rnd_compat_bits' sysctl: permission denied on key 'vm.stat_refresh'

Furthermore I tried to finished the install, but ended up with an installation where there were no filerights in place.

Is there something that should be done before running passbolt ce in a Unprivileged Containers in ProxMox? or do it need to be running as a fully virtualized machine?

I should add that I’m not very interested in running docker containers in this setup.

Best regards
'Adder

2

Hi Adder,

seems like your container doesn‘t have the necessary permissions, either you permit the container to modify the sysctl changes or you create a VM for it, thats what i would do

I‘m not an expert when it comes to Proxmox, but if you want to allow it, you could try to add these options to the Container

lxc.apparmor.profile: unconfined
lxc.cgroup.devices.allow: a
lxc.cap.drop:
lxc.cap.drop: mac_admin mac_override sys_time

best regards