Home / server / Questions / 346057
Accepted
gucki
Asked: 2012-01-04 01:03:55 +0800 CST

Is LXC secure enough for VPS hosting?

  • 772

Right now I'm using Linux VServer for VPS hosting. But it's lacking some functionality I need (ex. cpu usage virtualization, quota support for guests, etc.) so I'm thinking about switching to OpenVZ or directly to LXC. I somewhere read LXC is not considered secure yet (ex http://en.gentoo-wiki.com/wiki/LXC#MAJOR_Temporary_Problems_with_LXC_-_READ_THIS) - is this still true? As I don't know the persons who run the guests I really have to take care of security.

linux security openvz lxc

2 Answers

  1. Best Answer

    To the best knowledge at the time of this writing there were still critical issues with /proc filtering. They ought to be addressed in Linux Kernel 3.6 or later.

    Since I'm facing the same problem as you I've done some investigation and I'm not yet convinced that LXC is an alternative to Linux VServer.

    If you decide not to switch to LXC have a look at the cgroup support of Linux Vserver which is based on the same code as LXC and may be an option for your setup.

    • 4

  2. LXC added unprivileged containers support from 1.0 version, and Ubuntu appended more apparmor rules from release 14.04 LTS (5 years) that use 3.13 kernel, (LTS will append support for kernels from utopic now, vivid in some months, etc)

    many things about security with LXC are OLD now (the same applies to Docker, that is based in linux container tech based in cgroups) to me at least appear that lxc under Ubuntu is now a good alternative. I imagine that the same applies to Debian.

    • 1