Thanks for the tip, for some reason I assumed I couldn’t run docker in LXC but never actually tried… I prefer to avoid the overhead of a full VM and I find LXCs way easier to manage from the host system. Guess I’ll have something to test this weekend. Cheers!
Just create an LXC container to run your dockers, all you have to do is make sure you run the LXC as privileged and enable nesting.
There are security performance and capability concerns with that approach, apparmor on the first layer lxc probably being the most annoying.
If you want to isolate your docker sandbox from your main host, you should use a vm not a container.
OP’s already running LXC on the host, so… Namespaces are namespaces…
I don’t see what performance issues there would be with that.
Thanks for the tip, for some reason I assumed I couldn’t run docker in LXC but never actually tried… I prefer to avoid the overhead of a full VM and I find LXCs way easier to manage from the host system. Guess I’ll have something to test this weekend. Cheers!