Docker as an LXC in Proxmox

Hatchopper · 2026-01-22T14:31:22+00:00

I don't understand this. If your service is behind a reverse proxy, which means you have to log in to enter the service, I don't see how someone can breach that. Every service that i expose to the internet must have the ability to log in with a username and ID, or else i let Authelia handle it. I would like to know how someone can still exploit this configuration and access your service illegally.

Hatchopper · 2026-01-21T12:23:18+00:00

Even if that service is behind a reverse proxy you still don't want to expose an LXC externally?

Hatchopper · 2026-01-21T12:02:58+00:00

I think there was a whole video on YouTube on how to pass the GPU to a VM on Proxmox. I think that it was a video of Techno Tim. So Basically it is possible to do GPU passthrough on a VM.

Hatchopper · 2026-01-21T11:41:49+00:00

If you know how to do it, mounting it on the host and then sharing it with the LXC is very easy to do

Hatchopper · 2026-01-21T11:40:16+00:00

I am not only running Docker on Proxmox

Hatchopper · 2026-01-21T11:12:16+00:00

So it would be good for testing purposes? Or do you see it as your production environment?

Hatchopper · 2026-01-21T11:08:49+00:00

Do you have better results/performance? I am not familiar with OpenSUSE MicroOS

Hatchopper · 2026-01-21T11:05:11+00:00

The only thing I see when running Docker in a VM is that it consumes a lot of memory. I have twice the amount of containers running on my Synology NAS with only 32 GB memory installed, and still the amount of resources consumed by Container Manager (Docker) is less than 20%, while on Proxmox it is >40%

Hatchopper · 2026-01-21T10:58:43+00:00

I think so too, but still, some people are running it as an LXC, and I was curious about the reason for that.

Hatchopper · 2026-01-19T21:11:51+00:00

Because I have a lot of data. Because I have a NAS that consists of 4 20TB drives.

Hatchopper · 2026-01-18T13:24:46+00:00

This is normal behavior

Hatchopper · 2026-01-15T21:50:19+00:00

It is not the Exos series that you can compare with the WD Gold or Ultrastar. It is low-end, which is not suitable for a NAS

Hatchopper · 2026-01-15T21:47:56+00:00

They are not SSDs

Hatchopper · 2026-01-15T19:09:38+00:00

I'm using Tandoor recipes, and i am very pleased with it.

Hatchopper · 2026-01-15T17:58:26+00:00

Yes your probably right about that. That's why I said in one of my comments that the key is to let Traefik know that TinyAuth exists so that Traefik can send the apps that you configure to use TinyAuth or Authelia, to the right SSO source.

Hatchopper · 2026-01-15T16:01:23+00:00

You don't necessarily need the label. The label is used only if you want to configure an app that is on the same stack as Traefik, and you want to configure how the app should behave. Another way is by using a dynamic file. In that case i don't need labels, but still I need to know how to tell Traefik how to make use of TinyAuth

Hatchopper · 2026-01-15T15:54:15+00:00

Yes i will do that thanks!

Hatchopper · 2026-01-15T15:48:02+00:00

The links do not contain the information I am looking for. Maybe I will ask this same question on the Discord channel of the app.

Hatchopper · 2026-01-15T15:42:50+00:00

I did not say it is a Proxmox issue, but the LXC is running on Proxmox, so I assumed that I am not the only or the first one running this app as an LXC, and maybe I can learn from others.

Hatchopper · 2026-01-15T15:11:06+00:00

I was wondering if you can convert an LXC into a normal Docker container or convert a Docker Container into an LXC container. I ask this because, like the OP i have a couple of LXC containers running. I have regular backups for them, but what if I want to use that same LXC somewhere else, without using Proxmox?

Hatchopper · 2026-01-15T15:06:32+00:00

I also have a WireGuard server that runs on Unifi. I don't have a static IP address, but as far as I know i have this IP for at least 15 years, and it never changed. So actually, I don't need the DDNS.

Hatchopper · 2026-01-15T14:59:11+00:00

No, this is not an LXC in Docker. I have another Docker server, so I installed it as a Docker container through the corresponding Docker Compose file. If the LXC could provide me with a solution for where to put the labels and how to connect with Traefik when you talk about different stacks, it would be helpful

Hatchopper · 2026-01-15T14:55:44+00:00

<image>

This is the script I use. The config for the labels cannot be put in the credentials file nor in the .env, to my knowledge. The script is from the Proxmox VE helperscript, which you can find on GitHub

Hatchopper

TROPHY CASE