Using an unprivileged LXC container is the recommended method. It’s incredibly lightweight, fast to boot, and provides strong security by mapping the container’s root user to a non-privileged user on the Proxmox host. We will use a Debian template, as it’s the foundation of Proxmox and is very resource-efficient.

Step 1: Create the Unprivileged LXC Container

1. Download a Template: In your Proxmox web UI, select your node, then go to CT Templates under your local storage (or any other storage you use for templates). Click Templates and download the latest Debian template (e.g., `debian-12-standard).