
Trent W. Buck <trentbuck@gmail.com> wrote:
vserver and openvz are out-of-tree, and Ubuntu dropped support for them in 10.04 LTS (running 2.6.32). For that reason, I migrated to LXC, which is blessed by Ubuntu *and* Red Hat *and* it's in the mainline kernel, so you get it out of the box.
That's its most important advantage, I agree.
I wouldn't recommend LXC on 2.6.32; you have to jump through hoops to lock it down, and even now root can probably break out of my containers in a few ways. It's also immature around the edges -- for example "free" reports the system-wide resource limit and consumption, not the container's.
For others considering this option, the interesting question would be whether it has improved in later kernels. for my limited virtualization needs (basically, a test system that I can boot and experiment with when I want to try something but not on a system needed for real work), kvm is perfectly suitable.