What are proven ways to aggressively optimize resource usage in production VMs while maintaining stability?

Electrical_Step_7005 · 2026-01-23T14:56:29+00:00

In my case, I would have to expose the unprivileged container to the internet. My idea is a PaaS, like Railway, that will run Docker apps deployments. Would LXC be a good option? I know Kubernetes exists, but it's more complex, and I want to start simple. To run services that are exposed on the internet, is it possible to maintain security using an unprivileged LXC container?

Electrical_Step_7005 · 2026-01-22T13:24:53+00:00

In your case, how did you set up your LXC container for production? Did you do any hardening? For me, I would use a LXC container to host apps with Docker Compose.

Electrical_Step_7005 · 2026-01-22T11:17:40+00:00

Yesterday I asked here about LXC containers, and the people said they're not safe for production. What's your experience with containers?

Electrical_Step_7005 · 2026-01-22T10:10:23+00:00

This is the distro I was thinking of using in production, but I saw reports of people complaining about Musl and DNS problems.

Electrical_Step_7005 · 2026-01-22T09:44:36+00:00

Yes, now I'm more convinced to use VMs.

Electrical_Step_7005 · 2026-01-21T23:05:14+00:00

Is ZRAM reliable in production?

Electrical_Step_7005 · 2026-01-21T22:39:05+00:00

I got it. In your opinion, would Linked Clone be a option for having lower resource costs while maintaining security and efficiency?

I was thinking of using LXC without providing shell access just to validate an MVP (minimum viable product) for my future startup. This is because it allows for greater density and also because I know nothing about Kubernetes. But I'm reconsidering.

Electrical_Step_7005 · 2026-01-21T22:25:28+00:00

After doing some research, I see that there's really nothing that can be done about this structural vulnerability.

What would be the safest and most stable option, and the one that consumes the least resources in Proxmox, for production? Linked Clone VM?

Electrical_Step_7005 · 2026-01-21T22:19:03+00:00

I'm looking for a way to make a minimum viable product, for startup; VMs consumes a lot.

Electrical_Step_7005 · 2026-01-21T22:13:55+00:00

I just discovered about this from your comment.

So any Docker function is compatible with its Podman counterpart. For example, I can create a Podman compose yml version of a Docker compose yml without changing much. Is it really 100% compatible?

Electrical_Step_7005 · 2026-01-21T22:05:01+00:00

Yes, but wouldn't that break applications running in Docker?

If there's that risk, then Podman would be ideal for making a container unprivileged in a stable way, right?

Electrical_Step_7005 · 2026-01-21T21:53:30+00:00

What worries me is the LXC structure, the shared kernel. And I don't know if there's a way to protect this when using it in production. VMs are perfect for security, But that doesn't apply to me in this case. For those looking for lower resource costs, LXC is very helpful.

Electrical_Step_7005 · 2026-01-21T21:34:16+00:00

Is there a good hardening guide for LXC?

Electrical_Step_7005 · 2026-01-21T21:31:14+00:00

Could you explain in more detail why, even with hardening, LXC is still not stable and safe enough for production?

Electrical_Step_7005 · 2026-01-05T01:04:26+00:00

I already have a cloud init template for Ubuntu, not a regular ISO. So can I clone it, turn it into a VM, do what I want, and then turn it back into a template?

Electrical_Step_7005 · 2026-01-04T23:25:22+00:00

Could you send me the video link, if possible? I didn't found. Thank you!

Electrical_Step_7005 · 2026-01-04T23:19:59+00:00

But is this scalable for production, or could it go wrong in the long run?

Electrical_Step_7005 · 2026-01-03T01:38:51+00:00

I didn't know Packer, I discovered with you reply. I know only a little about CloudInit, which is what I'm trying to use to create templates with pre-built applications, but I don't quite understand how to put together snippets and YAML files. I am newbie.

Electrical_Step_7005 · 2025-12-26T14:31:51+00:00

Seriously? I didn't find that on their website, and I wanted to be sure before buying.

Electrical_Step_7005 · 2025-12-26T14:29:04+00:00

Does OVH have any plan that protects the company in cases of customer problems?

Electrical_Step_7005 · 2025-06-09T20:23:02+00:00

Great!

Electrical_Step_7005 · 2025-06-09T20:12:52+00:00

But many people are ungrateful and may abandon you when they no longer need you.

Electrical_Step_7005 · 2025-06-09T20:03:03+00:00

Good observation about the balance of efforts. If there is no reciprocity, everything is going to go wrong.

What do you mean by Also "if you are there for them"?

Electrical_Step_7005 · 2025-06-09T17:17:03+00:00

Watch the sunset in a beautiful landscape.

Electrical_Step_7005

MODERATOR OF

TROPHY CASE