diff --git a/proxmox/lxc/ct-101-samba/Containerfile.ganesha b/proxmox/lxc/ct-101-samba/Containerfile.ganesha
index bde7703..0c11ff6 100644
--- a/proxmox/lxc/ct-101-samba/Containerfile.ganesha
+++ b/proxmox/lxc/ct-101-samba/Containerfile.ganesha
@@ -19,4 +19,8 @@ LABEL eu.selfhost.ghostnet.stack="samba" \
       eu.selfhost.ghostnet.role="nfs-export" \
       eu.selfhost.ghostnet.base-digest="sha256:918311b7b6c4c6f68b232ba516584925f6c78ad82b6fd534b98979df6438e483"
 
-CMD ["/usr/bin/ganesha.nfsd", "-F", "-f", "/etc/ganesha/ganesha.conf", "-L", "/dev/stderr"]
+# -p /run/ganesha.pid: the container runs ReadOnly with /run as a rw tmpfs, so
+# the compiled-in default /var/run/ganesha/ganesha.pid is not writable there
+# (the directory does not exist -> ENOENT at startup). /run itself exists and
+# is writable. Verified with ganesha.nfsd -p on 2026-10-30.
+CMD ["/usr/bin/ganesha.nfsd", "-F", "-f", "/etc/ganesha/ganesha.conf", "-L", "/dev/stderr", "-p", "/run/ganesha.pid"]
diff --git a/proxmox/lxc/ct-101-samba/ansible/inventories/agent/group_vars/samba_hosts.yml b/proxmox/lxc/ct-101-samba/ansible/inventories/agent/group_vars/samba_hosts.yml
index c45ed2b..3a18ef6 100644
--- a/proxmox/lxc/ct-101-samba/ansible/inventories/agent/group_vars/samba_hosts.yml
+++ b/proxmox/lxc/ct-101-samba/ansible/inventories/agent/group_vars/samba_hosts.yml
@@ -271,4 +271,4 @@ samba_nfs_build_directory: /var/lib/ghostnet/samba/build
 samba_nfs_config_directory: /etc/ghostnet/samba/ganesha
 samba_nfs_state_directory: /var/lib/ghostnet/samba/ganesha
 samba_nfs_containerfile_sha256: >-
-  0fdbe6b5fe542f22ed291c4cabe505e0da472024f0186e2414fd002b751f784f
+  54cf9cae60b3a3849d61213e5892f8ec14a2c8bdffeed2c8586ff727c73aef73
diff --git a/proxmox/lxc/ct-101-samba/ansible/inventories/bootstrap/group_vars/samba_hosts.yml b/proxmox/lxc/ct-101-samba/ansible/inventories/bootstrap/group_vars/samba_hosts.yml
index c45ed2b..3a18ef6 100644
--- a/proxmox/lxc/ct-101-samba/ansible/inventories/bootstrap/group_vars/samba_hosts.yml
+++ b/proxmox/lxc/ct-101-samba/ansible/inventories/bootstrap/group_vars/samba_hosts.yml
@@ -271,4 +271,4 @@ samba_nfs_build_directory: /var/lib/ghostnet/samba/build
 samba_nfs_config_directory: /etc/ghostnet/samba/ganesha
 samba_nfs_state_directory: /var/lib/ghostnet/samba/ganesha
 samba_nfs_containerfile_sha256: >-
-  0fdbe6b5fe542f22ed291c4cabe505e0da472024f0186e2414fd002b751f784f
+  54cf9cae60b3a3849d61213e5892f8ec14a2c8bdffeed2c8586ff727c73aef73
diff --git a/proxmox/lxc/ct-101-samba/ansible/inventories/production/group_vars/samba_hosts.yml b/proxmox/lxc/ct-101-samba/ansible/inventories/production/group_vars/samba_hosts.yml
index c45ed2b..3a18ef6 100644
--- a/proxmox/lxc/ct-101-samba/ansible/inventories/production/group_vars/samba_hosts.yml
+++ b/proxmox/lxc/ct-101-samba/ansible/inventories/production/group_vars/samba_hosts.yml
@@ -271,4 +271,4 @@ samba_nfs_build_directory: /var/lib/ghostnet/samba/build
 samba_nfs_config_directory: /etc/ghostnet/samba/ganesha
 samba_nfs_state_directory: /var/lib/ghostnet/samba/ganesha
 samba_nfs_containerfile_sha256: >-
-  0fdbe6b5fe542f22ed291c4cabe505e0da472024f0186e2414fd002b751f784f
+  54cf9cae60b3a3849d61213e5892f8ec14a2c8bdffeed2c8586ff727c73aef73
diff --git a/proxmox/lxc/ct-101-samba/ansible/roles/samba_nfs/defaults/main.yml b/proxmox/lxc/ct-101-samba/ansible/roles/samba_nfs/defaults/main.yml
index d8741f7..45b9133 100644
--- a/proxmox/lxc/ct-101-samba/ansible/roles/samba_nfs/defaults/main.yml
+++ b/proxmox/lxc/ct-101-samba/ansible/roles/samba_nfs/defaults/main.yml
@@ -4,9 +4,9 @@ samba_nfs_quadlet_directory: /etc/containers/systemd
 samba_nfs_build_directory: /var/lib/ghostnet/samba/build
 samba_nfs_config_directory: /etc/ghostnet/samba/ganesha
 samba_nfs_state_directory: /var/lib/ghostnet/samba/ganesha
-# Reviewed checksum of ../../Containerfile.ganesha (sha256sum, 2026-10-20):
+# Reviewed checksum of ../../Containerfile.ganesha (sha256sum, 2026-10-30):
 samba_nfs_containerfile_sha256: >-
-  0fdbe6b5fe542f22ed291c4cabe505e0da472024f0186e2414fd002b751f784f
+  54cf9cae60b3a3849d61213e5892f8ec14a2c8bdffeed2c8586ff727c73aef73
 samba_nfs_source_image: >-
   docker.io/library/debian:trixie-slim@sha256:918311b7b6c4c6f68b232ba516584925f6c78ad82b6fd534b98979df6438e483
 samba_nfs_runtime_tag: localhost/ghostnet/ganesha:trixie-ansible1