宿主机 nano /etc/pve/lxc/lxc-id.conf
文件最后添加

1
2
lxc.cgroup2.devices.allow: c 10:200 rwm 
lxc.mount.entry: /dev/net/tun dev/net/tun none bind,create=file

安装zerotier

1
curl -s https://install.zerotier.com | sudo bash

加入

1
zerotier-cli join

设置转发

1
echo "net.ipv4.ip_forward = 1" >> /etc/sysctl.conf && sysctl -p

配置nat

1
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

开机自动nat 持久化保存

1
apt install -y iptables-persistent && bash -c iptables-save > /etc/iptables/rules.v4