[lxc-users] Using LXC as an application container.

[Brian Allen Vanderburg II]

I'm wondering if LXC could be used to create a generic application
container/sandbox.  I've created similar sandboxes in the past using
chroot, unionfs-fuse, and bind mounts, successfully running applications
such as Firefox, Sauerbraten, etc.  But this was limited and had
drawbacks.  Using chroot requires root, unprivileged containers can be
run without root after everything is properly set up.  Chroot only hides
away parts of the filesystem, a container can also isolate network
namespaces, etc.  Is there a way to achieve similar, with better control
of isolation, using unprivileged containers?


Brian Allen Vanderburg II

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.linuxcontainers.org/pipermail/lxc-users/attachments/20150604/1e971ad0/attachment.sig>