LXC container reference
Lifecycle: Current. Last verified: 2026-07-17. The canonical cross-platform register is current inventory.
| CT | State | Resources | Address | Startup | Role |
|---|---|---|---|---|---|
101 podman-lxc |
Running | 4 cores, 8192 MiB, 64 GiB | DHCP 192.168.2.20, VLAN 2 |
order 4 | Rootless applications and data |
102 technitium-dns |
Running | 2 cores, 1024 MiB, 8 GiB | DHCP 192.168.2.2, VLAN 2 |
order 2 | DNS |
103 caddy-ingress |
Running | 2 cores, 1024 MiB, 8 GiB | DHCP 192.168.2.3, VLAN 2 |
order 3 | HTTP/HTTPS ingress |
104 khysite |
Running | 2 cores, 512 MiB, 8 GiB | DHCP 192.168.2.5, VLAN 2 |
no explicit order | Separate website; internals unverified |
105 ts-router |
Running | 1 core, 512 MiB, 8 GiB | DHCP 192.168.2.120, VLAN 2 |
order 5 | Headscale subnet router |
106 rustdesk |
Running | 1 core, 1024 MiB, 8 GiB | Static 192.168.2.70, VLAN 2 |
order 3 | RustDesk ID/relay |
107 mail-recovery-fauzia |
Stopped | Unverified | Not active | Unverified | Recovery guest; owner/data/lifecycle unverified |
All running CTs are unprivileged. CT 101, 105, and 106 use
nesting=1,keyctl=1; CT 101 and 105 also need narrow /dev/net/tun
passthrough for rootless networking/Tailscale.
Validate
ssh pvessh 'pct list'
ssh pvessh 'for id in 101 102 103 104 105 106 107; do pct config "$id"; done'
ssh pvessh 'for id in 101 102 103 104 105 106; do
printf "CT%s " "$id"
pct exec "$id" -- hostname -I
done'
Expected: do not force state to match this page. Investigate and document any deviation.
Change and recovery
Before an approved resource, disk, network, or startup change, record pct
config, verify storage, create a current backup, and identify dependent
services. Change one CT at a time. Restore the previous pct setting or guest
backup on failure.
Service-specific procedures:
Historical IDs
Old references to CT 100 proxy, CT 107 dns, CT 101 gam, CT 105 down,
and CT 106 rdhost describe a different estate. IDs have been reused. Never
apply an old command by ID without confirming the current hostname and role.
Historical CT 100 proxy
CT 100 proxy was the Docker/Traefik application host in the 2026-06-09
snapshot. It is not present in the current inventory.