===== OpenVPN in LXC =====

This guide quickly describes how to connect a Linux container as VPN client with OpenVPN.

There are some settings on the host's side required, because OpenVPN requires a specific ''tun'' interface.

  - Edit the config of the container that should get VPN functionalities <code bash>nano /etc/pve/lxc/<container-id>.conf</code>
  - Add this two lines to the config: <code bash>
lxc.cgroup2.devices.allow: c 10:200 rwm
lxc.mount.entry: /dev/net dev/net none bind,create=dir
</code>
  - After saving change the owner of the device:<code bash>chown 100000:100000 /dev/net/tun</code>
  - You can check the permissions with: <code bash>ls -l /dev/net/tun</code> It should print: <code bash>crw-rw-rw- 1 100000 100000 10, 200 Dec 22 13:26 /dev/net/tun</code>
  - Finished! You can now start the container and connect to the OpenVPN server <code bash>openvpn --config <config-file>.ovpn</code>

//Sourced from [[https://pve.proxmox.com/wiki/OpenVPN_in_LXC|pve.proxmox.com - OpenVPN in LXC]]//