From 6ec7674d8af0ae96b4a2c576e0c8ba712df15bfe Mon Sep 17 00:00:00 2001
From: tteckster <tteckster@gmail.com>
Date: Sun, 6 Feb 2022 04:15:18 -0500
Subject: [PATCH] Update debian11_container.sh

---
 ct/debian11_container.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/ct/debian11_container.sh b/ct/debian11_container.sh
index d4a1fc79..c002b0c6 100644
--- a/ct/debian11_container.sh
+++ b/ct/debian11_container.sh
@@ -146,6 +146,12 @@ pct create $CTID $TEMPLATE_STRING -arch $ARCH -features nesting=1 \
   -hostname $HOSTNAME -net0 name=eth0,bridge=vmbr0,ip=dhcp -onboot 1 -cores 1 -memory 512\
   -ostype $OSTYPE -rootfs $ROOTFS,size=$DISK_SIZE -storage $STORAGE >/dev/null
 
+LXC_CONFIG=/etc/pve/lxc/${CTID}.conf
+cat <<EOF >> $LXC_CONFIG
+lxc.cgroup2.devices.allow: a
+lxc.cap.drop:
+EOF
+
 MOUNT=$(pct mount $CTID | cut -d"'" -f 2)
 ln -fs $(readlink /etc/localtime) ${MOUNT}/etc/localtime
 pct unmount $CTID && unset MOUNT