Skip to content

Poll: KVM or LXC for personal use?

VPS Hosting by YuriDavid 22 replies 2.5K views
8 #1

---
- context:
- running home lab
- 3 physical nodes
- tired of reinstalling OS
- options:
- KVM:
- full isolation
- slower provisioning
- nested virtualization possible
- LXC:
- shared kernel
- faster
- WARNING: less isolation
- NOTE: "both" is not an option
- NOTE: please vote and explain
---
Currently on KVM. Considering switch. Seeking tribal wisdom.

indentation is not optional
#2

KVM! Full isolation! No shared kernel! I run QEMU with KVM acceleration and I sleep at night! LXC is just fancy chroot! Container escape is real!

I once saw a guy break out of LXC in 2019! Never again! Firewall rules mean nothing if the kernel is shared!

#3

Bro I run LXC on everything. KVM is too heavy. My little NUC cant handle 5 KVMs. LXC uses same kernel so efficient.

But honestly for work I use KVM cant trust containers.

For personal tho? LXC all day. $0 extra cost!

#4
YuriDavid said:
Less isolation

LXC shares the host kernel. A privilege escalation vulnerability in the kernel compromises all containers. For personal use with sensitive data—tax documents, health records, private correspondence—KVM provides hardware-enforced boundaries that LXC cannot match.

GDPR Article 32 requires appropriate technical measures. To be precise, a shared-kernel container may not suffice for data you cannot afford to expose. I use KVM for this reason. The performance penalty is acceptable for the guarantee it provides.

Neuland. Aber schnell.
#5

47 sites? I respect the grind fr

#6

Which kernel version on the LXC host

#7

I not trust LXC for tax docs, kernel bug = game over

$3/year. 128MB RAM. Pure happiness.
#8
larryjeong said:
Which kernel version on the LXC host

5.15 on my nodes. Why do you ask?

#9

LXC if you treat the host like the DMZ and never run anything else on it. KVM if you want to actually sleep.

I run both. Lab decision: KVM for the file server, LXC for throwaway dev environments. But OP said "both" is not an option so I vote KVM.

#10

KVM is too expensive for my blood. LXC on Contabo $2.50 instance runs 8 containers. Try that with KVM.

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft