项目地址 https://linuxcontainers.org/

LXC是众所周知的一套工具，模板，图书馆和语言绑定。这是相当低的水平，非常灵活，占地面积只是由上游内核支持每遏制功能。

LXC是生产准备与LXC 1.0听到5年安全性更新和bug修正（直到2019年4月）。

LinuxContainers.org Infrastructure for container projects.

linuxcontainers.org is the umbrella project behind LXC, LXD, LXCFS and CGManager.

The goal is to offer a distro and vendor neutral environment for the development of Linux container technologies.

Our main focus is system containers. That is, containers which offer an environment as close to possible as the one you'd get from a VM but without the overhead that comes with running a separate kernel and simulating all the hardware.

This is achieved through a combination of kernel security features such as namespaces, mandatory access control and control groups.

Projects. The interesting stuff.

LXC

LXC is the well known set of tools, templates, library and language bindings. It's pretty low level, very flexible and covers just about every containment feature supported by the upstream kernel.

LXC is production ready with LXC 1.0 getting 5 years of security updates and bugfixes (until April 2019).

More »

LXD

LXD is the new LXC experience. It offers a completely fresh and intuitive user experience with a single command line tool to manage your containers. Containers can be managed over the network in a transparent way through a REST API. It also works with large scale deployments by integrating with OpenStack.

LXD was announced in early November 2014 and is still under very active development.

More »

CGManager

CGManager is our cgroup manager daemon. It's designed to allow nested unprivileged containers to still be able to create and manage their cgroups through a DBus API.

CGManager has been used by default with LXC in Ubuntu since April 2014 and then by other distributions as they start needing working unprivileged containers.

More »

LXCFS

Userspace (FUSE) filesystem offering two main things:

• Overlay files for cpuinfo, meminfo, stat and uptime.
• A cgroupfs compatible tree allowing unprivileged writes.

It's designed to workaround the shortcomings of procfs, sysfs and cgroupfs by exporting files which match what a system container user would expect.

More »