[Lxc-users] Proper way to use LXC to serve multiple apps execution from outside

[Đỗ Hoàng Khiêm]

Thanks Fajar,

I admit that something is not really clear in my description, but it seems
that you misunderstood what I mean.
My web application is just an entry point to receive application (in fact,
script code) and execution request, the web application doesn't need to run
inside an isolated environment, but the user application (code, for example
a python script) which client submit to my system needs it. Each python
script will be executed in an isolated environment, independently of each
other or my main web application. And a Lxc probably what I need to achieve
that goal?

Does it make sense?

On Thu, May 10, 2012 at 4:24 PM, Fajar A. Nugraha <list at fajar.net> wrote:

> On Thu, May 10, 2012 at 3:51 PM, Đỗ Hoàng Khiêm <dohoangkhiem at gmail.com>
> wrote:
> > Yes, I think it needs a new process for each request serving.
> >
> > In overall, I have a web application, it receives the application scripts
> > and execution requests from clients then try to execute it on the server
> > side. So I think that each request is isolated and I want to try the
> ability
> > to execute these requests in a sandbox environment.
>
> IMHO you need to define your requirements more. Then break it down to
> distinct components that each can be fulfilled by a software solution.
> Possibly study more about each components.
>
> If you simply want "an isolated environment for a web application",
> there are other ways to achieve this, which is more efficient than
> lxc. For example, if your web application uses php, simply using
> php-fpm plus its chroot feature, running as a a distinct normal user
> (i.e. not root, not the webserver user, and not the same as user for
> other web applications) should be sufficiently secure while still
> having the performance of a fcgi application.
>
> --
> Fajar
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxcontainers.org/pipermail/lxc-users/attachments/20120510/560a605f/attachment.html>