X-Git-Url: https://git.proxmox.com/?a=blobdiff_plain;f=pct.adoc;h=b55ce1d2c0f828e8031f68175c44be6c8870e4a3;hb=99f6ae1a7fd9ec8bb911deea84614439403bfb02;hp=678906d9df1d2289cb750edc5840e40035e96e3a;hpb=c7bc47af24453774898ea9698c3d2ad97becfc65;p=pve-docs.git diff --git a/pct.adoc b/pct.adoc index 678906d..b55ce1d 100644 --- a/pct.adoc +++ b/pct.adoc @@ -68,6 +68,32 @@ NOTE: If you want to run micro-containers (with docker, rkt, ...), it is best to run them inside a VM. +Technology Overview +------------------- + +* LXC (https://linuxcontainers.org/) + +* Integrated into {pve} graphical user interface (GUI) + +* Easy to use command line tool `pct` + +* Access via {pve} REST API + +* lxcfs to provide containerized /proc file system + +* AppArmor/Seccomp to improve security + +* CRIU: for live migration (planned) + +* Use latest available kernels (4.4.X) + +* Image based deployment (templates) + +* Use {pve} storage library + +* Container setup from host (network, DNS, storage, ...) + + Security Considerations ----------------------- @@ -648,49 +674,6 @@ CAUTION: Only do that if you are sure the action which set the lock is no longer running. -Container Advantages --------------------- - -* Simple, and fully integrated into {pve}. Setup looks similar to a normal - VM setup. - -** Storage (ZFS, LVM, NFS, Ceph, ...) - -** Network - -** Authentication - -** Cluster - -* Fast: minimal overhead, as fast as bare metal - -* High density (perfect for idle workloads) - -* REST API - -* Direct hardware access - - -Technology Overview -------------------- - -* Integrated into {pve} graphical user interface (GUI) - -* LXC (https://linuxcontainers.org/) - -* lxcfs to provide containerized /proc file system - -* AppArmor - -* CRIU: for live migration (planned) - -* We use latest available kernels (4.4.X) - -* Image based deployment (templates) - -* Container setup from host (network, DNS, storage, ...) - - ifdef::manvolnum[] Files