3 ms·
"LXC used as a container for all dynos running on Celadon Cedar" Has anybody published a complete SELinux or SMACK policy to use LXC with untrusted users? Last
by klaruz 15y ago
"LXC used as a container for all dynos running on Celadon Cedar"
Has anybody published a complete SELinux or SMACK policy to use LXC with untrusted users? Last I checked LXC wasn't fully ready yet.
- peregrinari 15y agoVery interested to hear this as well. Anyone from Heroku can comment?
- mmcgrana 15y agoLXC is one of several isolation layers used in the Heroku dyno manifold to ensure process security and resource guarantees. Here is a more in-depth discussion of Heroku dyno isolation: http://devcenter.heroku.com/articles/dyno-isolation http://devcenter.heroku.com/articles/dyno-isolation.