Archived
Proxmox LXC containers block the sunrpc filesystem (rpc_pipefs) via AppArmor unless the container has `features: mount=nfs` set. NFSv4 requires rpc_pipefs for client state management, so the mount fails outright in a default LXC. Two fixes for the LXC case (config.boot.isContainer): - Switch from nfsvers=4.2 to nfsvers=3,proto=tcp,nolock,nofail: NFSv3 doesn't need rpc_pipefs at the protocol level, and nofail keeps boot clean if the NFS server is unreachable. - Add ConditionVirtualization=!container to var-lib-nfs-rpc_pipefs.mount via systemd drop-in: NixOS pulls this unit into nfs-client.target for any NFS fileSystems entry. With the condition, systemd skips (not fails) the unit in containers, keeping nfs-client.target green and activation reporting clean. Proxmox VM hosts (not isContainer) continue to use nfsvers=4.2 with x-systemd.automount unchanged. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>