Re: [Lxc-users] Lxc and security

2013-03-28 Thread Jean-François Leroux
Thanks for this detailed information, Stéphane. Well, it seems I'm heading towards Ubuntu :-) Cheers, JFL Le 27/03/2013 20:14, Stéphane Graber a écrit : On 03/27/2013 01:49 PM, Jean-François Leroux wrote: Thanks for your input. So basically, if I can define cgroup.limits, drop capabilities,

Re: [Lxc-users] Lxc and security

2013-03-27 Thread Jean-François Leroux
Thanks for your input. So basically, if I can define cgroup.limits, drop capabilities, etc. I shall have about the same security as with Ubuntu ? JFL Le 27/03/2013 01:32, Fajar A. Nugraha a écrit : On Wed, Mar 27, 2013 at 10:56 AM, Jean-François Leroux leroux.jeanfranc...@gmail.com

Re: [Lxc-users] Lxc and security

2013-03-27 Thread Stéphane Graber
On 03/27/2013 01:49 PM, Jean-François Leroux wrote: Thanks for your input. So basically, if I can define cgroup.limits, drop capabilities, etc. I shall have about the same security as with Ubuntu ? JFL The main addition Ubuntu does to securing apparmor, outside of trying to lead the work to

[Lxc-users] Lxc and security

2013-03-26 Thread Jean-François Leroux
Hi all, I'm rather new to LXC (although I've been using it for two years now) and have some questions about security. I know many of these have been discussed in various websites, but I'd like to get advice from real users - and many articles I've read may be outdated. 1) I've read that lxc

Re: [Lxc-users] Lxc and security

2013-03-26 Thread Fajar A. Nugraha
On Wed, Mar 27, 2013 at 10:56 AM, Jean-François Leroux leroux.jeanfranc...@gmail.com wrote: Hi all, I'm rather new to LXC (although I've been using it for two years now) and have some questions about security. I know many of these have been discussed in various websites, but I'd like to get