Comment on Improving security by separating server duties
LewdLemon@sh.itjust.works 2 weeks agoI’ve done my research on that, and from what I gathered, LXCs share the host kernel, meaning: if the LXC is compromised, so is the host system. So if I go with Proxmox, I’ll probably swallow the (somewhat) larger overhead of running a full VM.
trojanbark@lemmy.world 2 weeks ago
Don’t make any of them accessible from the Internet then. VM escape is also possible for someone with skills