Comment on Best Practice Ideas
zzffyfajzkzhnsweqm@sh.itjust.works 4 weeks ago
I just recently tried to setup k3s in proxmox LXC containers. I had to do everything again after I learned it was not possible to make this setup without comproimising security and isolation. Now I run kubernetes inside virtual machines in proxmox.
nagaram@startrek.website 4 weeks ago
That’s what I was thinking too. Ijust feel better having another layer between the open web an my server
zzffyfajzkzhnsweqm@sh.itjust.works 4 weeks ago
To setup kubernetes inside lxc you have to enable quite some capabilities inside host kernel and lxd containers that can be used to escalate privileges from beeing root in container to root in proxmox. Not completely sure but since even containerd containers share the same kernel, attacker might escalate directly from pod to proxmox host. But this last par I am not sure about.