[szszrk]

Oh no, just these services still use some /dev/ and /proc/ stuff, unprivileged container doesn't have access to that. So you either have to run privileged container (I wanted to avoid this), try to pass-through all devices needed, or mount those on the underlying host OS and pass that to container as a bind mount.

For me so far there is always a decent workaround when I want to use USB device etc.. The only thing I am currently stuck with is sound in LXC container (I build kind of a VDI desktop, RDP access to a system with KDE) and struggle to pass the actual sound card through. There is some active proxmox forum thread on that so I'm hopeful.