is best to run them inside a VM.
+Technology Overview
+-------------------
+
+* LXC (https://linuxcontainers.org/)
+
+* Integrated into {pve} graphical user interface (GUI)
+
+* Easy to use command line tool `pct`
+
+* Access via {pve} REST API
+
+* lxcfs to provide containerized /proc file system
+
+* AppArmor/Seccomp to improve security
+
+* CRIU: for live migration (planned)
+
+* Use latest available kernels (4.4.X)
+
+* Image based deployment (templates)
+
+* Use {pve} storage library
+
+* Container setup from host (network, DNS, storage, ...)
+
+
Security Considerations
-----------------------
no longer running.
-Container Advantages
---------------------
-
-* Simple, and fully integrated into {pve}. Setup looks similar to a normal
- VM setup.
-
-** Storage (ZFS, LVM, NFS, Ceph, ...)
-
-** Network
-
-** Authentication
-
-** Cluster
-
-* Fast: minimal overhead, as fast as bare metal
-
-* High density (perfect for idle workloads)
-
-* REST API
-
-* Direct hardware access
-
-
-Technology Overview
--------------------
-
-* Integrated into {pve} graphical user interface (GUI)
-
-* LXC (https://linuxcontainers.org/)
-
-* lxcfs to provide containerized /proc file system
-
-* AppArmor
-
-* CRIU: for live migration (planned)
-
-* We use latest available kernels (4.4.X)
-
-* Image based deployment (templates)
-
-* Container setup from host (network, DNS, storage, ...)
-
-
ifdef::manvolnum[]
Files