Tailscale inside an unprivileged LXC container on Proxmox

Since I run LXC containers in unprivileged mode, I had to first run the following on Proxmox host. (Without it, Tailscale won’t install):

chown 100000:100000 /dev/net/tun

Here’s how my container config looks like on the host.

root@pve:~# cat /etc/pve/lxc/100.conf 
# .. bunch of stuff

# The following 2 is to allow Tailscale to run on the containers:
lxc.cgroup2.devices.allow: c 10:200 rwm
lxc.mount.entry: /dev/net/tun dev/net/tun none bind,create=file