LXC文件系統隔離實現原理

LXC使用如下內核特性來來實現虛擬化：spa  Kernel namespaces (ipc, uts, mount, pid, network and user) Apparmor and SELinux profiles Seccomp policies Chroots (using pivot_root) Kernel capabilities Control groups (cgroups

>>阅读原文<<