Comment on Heroku Announces New Version: “Celadon Cedar”parentComments−peregrinari15yVery interested to hear this as well. Anyone from Heroku can comment?−mmcgrana15yLXC is one of several isolation layers used in the Heroku dyno manifold to ensure process security and resource guarantees. Here is a more in-depth discussion of Heroku dyno isolation: http://devcenter.heroku.com/articles/dyno-isolation.−klaruz15ySo LXC is fully secure now if you stick to chroot?http://www.mail-archive.com/lxc-users@lists.sourceforge.net/...−shykes15yYou can't contain root in lxc. It's great for unprivileged users, though.
Comments
Very interested to hear this as well. Anyone from Heroku can comment?
LXC is one of several isolation layers used in the Heroku dyno manifold to ensure process security and resource guarantees. Here is a more in-depth discussion of Heroku dyno isolation: http://devcenter.heroku.com/articles/dyno-isolation.
So LXC is fully secure now if you stick to chroot?
http://www.mail-archive.com/lxc-users@lists.sourceforge.net/...
You can't contain root in lxc. It's great for unprivileged users, though.