LXC versus KVM-Qemu- which is more secure against jail breaks/exploits?

dman777 · 07-29-2011, 03:49 AM

I see RHEL recently enough (2011-05-19) released a fix for two security exploits for Qemu-Kvm. What about LXC? Up to date, which one is more secure against jail breaks? I did a google search and didn't really find anything about LXC in that respect, but then again it's probably not as popular.

grzesiek · 07-31-2011, 10:44 AM

LXC is like Jail BSD.
This is a system-level virtualisations. CPU don't must support VT technology.
But KVM is a hardware-level virtualisation. CPU must support VT technology.
In my opinion KVM is a more isolated enviroment.
Virtual system working in LXC technology uses less resources, becouse he uses the same kernel what mother system.