Comment on Heroku Announces New Version: “Celadon Cedar”parentComments−mmcgrana15yLXC is one of several isolation layers used in the Heroku dyno manifold to ensure process security and resource guarantees. Here is a more in-depth discussion of Heroku dyno isolation: http://devcenter.heroku.com/articles/dyno-isolation.−klaruz15ySo LXC is fully secure now if you stick to chroot?http://www.mail-archive.com/lxc-users@lists.sourceforge.net/...−shykes15yYou can't contain root in lxc. It's great for unprivileged users, though.
Comments
LXC is one of several isolation layers used in the Heroku dyno manifold to ensure process security and resource guarantees. Here is a more in-depth discussion of Heroku dyno isolation: http://devcenter.heroku.com/articles/dyno-isolation.
So LXC is fully secure now if you stick to chroot?
http://www.mail-archive.com/lxc-users@lists.sourceforge.net/...
You can't contain root in lxc. It's great for unprivileged users, though.