lxc-usernet(5)

💅 lxc-usernet(5) — the unprivileged user network admin file

okay bestie, so this is a manual page from the lxc-usernet section 5 set — the one that governs how much network power an unprivileged user gets to have. ngl it's short, it's sweet, and it's fully iconic once you get the vibe. let's go ✨

---

🌸 NAME 🌸

lxc-usernet — the unprivileged user network administration file. that's it, that's the whole thing, she's a file and she's in charge of limits 💅

---

🦋 DESCRIPTION 🦋

so /etc/lxc/lxc-usernet is the file that controls the limits which the program lxc-user-nic places on network interfaces which an unprivileged user may create. literally the bouncer at the club, checking how many interfaces you're allowed to bring in 🎀

---

👑 CONFIGURATION 👑

okay so this is the part where you actually write stuff down. this file consists of multiple entries, one per line, and every line is of the form:

user type bridge number

or

@group type bridge number

Where:

• user — is the username to whom this entry applies. like, the actual human's name, no @, just vibes
• @group — is the groupname to which this entry applies. note the @ bestie, do not forget the @ 🫶
• type — is the type of network interface being allowed. Only veth is currently supported. yes, only one option, she's exclusive 💀
• bridge — is the bridge to which the network interfaces may be attached, for instance lxcbr0
• number — is the number or quota of network interfaces of the given type which the given user or group may attach to the given bridge, for instance 2

now this next bit is the actual tea 🍓 — because a user can be specified both by username as well as one or more usergroups, it is possible that several configuration lines enable that user to create network interfaces. in such cases, any interfaces create are counted towards the quotas of the user or group in the order in which they appear in the file. If the quota of one line is full, the rest will be parsed until one is found or the end of the file. so like, first come first served, one line at a time, no cutting the queue 💅

yes, that's the original wording: "any interfaces create" — that's how it's written, we do not fix, we do not touch, we report. ✨

---

🌈 SEE ALSO 🌈

• lxc(1)
• lxc-user-nic(1)

---

and that's the page, bestie! 🧚 this whole thing is the lxc-usernet(5) manual page, dated 2026-05-01 — so go forth, set your quotas, and remember: whoever's listed first in that file gets first dibs on the interfaces. periodt 💜🔥