Oujiii

UFW

I use Ubuntu’s Uncomplicated firewall because it is available on Ubuntu and it's very simple.

Install UFW

if ufw is not installed by default be sure to install it first.

Proxmox Assign Bind Mount To Unprivileged Container

In order for the LXC container to have full access the proxmox host directory, a subgid is set as owner of a host directory, and an ACL is used to ensure permissions.

Bind Mount dataset to LXC

Add the following line to /etc/pve/lxc/<CT_ID>.conf

mp0:/mount/point/on/host,mp=/mount/point/on/lxc

Create group on host

In the default Proxmox configuration, unpriviliged container subgids will have the prefix "10" followed by the expected 4-digit gid.

	#!/bin/bash
	# original author : Relliktsohg
	# Huge thanks to Maine for his incremental backup
	# Thanks to endofzero for his improved update routine
	#
	# Installation:
	# - Copy script into you minecraft server folder.
	# - Allow the script to be executed (chmod +x minecraft.sh)
	# - Check the rights of the script user. Every folder specified in config has to be available.
	# - Edit the script to configure it (see configure section)

	###
	# Proxmox or other server kernel params cheap tune and secure.
	# Try it if you have heavy load on server - network or memory / disk.
	# No harm assumed but keep your eyes open.
	#
	# @updated: 2020-02-06 - more params used, adjust some params values, more comments on params
	#

	### NETWORK ###

	#!/bin/bash

	# Reference guides:
	# https://wiki.archlinux.org/index.php/PCI_passthrough_via_OVMF
	# https://pve.proxmox.com/wiki/Pci_passthrough
	# https://pve.proxmox.com/wiki/Nested_Virtualization

	# Remember to turn on SVM in BIOS and disable CSM

	# Update packages

	#!/bin/bash

	# This is a shitty workaround to Ankama not providing everything required in an actual package
	# or even a proper dependency list.

	# License: Unlicense, see bottom of file

	if [ $# -ne 2 ]; then
	echo "Usage: $0 path/to/dofus.tar.gz path/to/place/game/folder"
	exit 0