LXC
What it is
LXC is free software for creating and managing Linux system or application containers through Linux kernel containment features. It aims to provide an environment close to a standard Linux installation without requiring a separate kernel. The project includes the liblxc library, container control tools, distribution templates, and API bindings for Python 3, Lua, Go, Ruby, and Haskell. Containment uses kernel namespaces, AppArmor and SELinux profiles, seccomp policies, chroots, kernel capabilities, and cgroups. LXC describes unprivileged containers as safe by design because container root maps to an unprivileged host user. However, denial-of-service attacks are not blocked by default, so cgroup limits are advised for untrusted containers. Privileged containers run processes as host root. LXC is included in most Linux distributions, requires a supported C library and Linux kernel 2.6.32 or later, and lists long-term support releases 7.0 and 6.0.
For and against
For
- Free software with no charge stated
- No separate kernel required for containers
- Multiple containment and security mechanisms
- Includes tools, templates, and language bindings
- Available through most Linux distributions
Against
- Linux host required
- Denial-of-service protection is not enabled by default
- Privileged containers run processes as host root
- Kernel 2.6.32 or later is required
The verdict
LXC provides a Linux-native container interface with broad tooling, security controls, and language bindings. Users running untrusted workloads must configure resource limits and treat privileged containers carefully.
Who it suits
It suits Linux users and developers who need system or application containers without separate kernels. It also provides bindings for several programming languages and rootless operation.
Plans and prices
LXC
Linux kernel required · No separate kernel for containers
Read 8 Oct 2026 · linuxcontainers.org
On the record
- Components
- LXC includes the liblxc library, standard container control tools, distribution templates, and API bindings for Python 3, Lua, Go, Ruby, and Haskell.linuxcontainers.org · read 8 Oct 2026
- Container model
- LXC aims to provide an environment close to a standard Linux installation without requiring a separate kernel.linuxcontainers.org · read 8 Oct 2026
- Installation
- LXC is included in most Linux distributions and is generally installed through the distribution package manager.linuxcontainers.org · read 8 Oct 2026
- Licensing
- LXC is free software, with most code under GNU LGPLv2.1+ and some components under BSD 2-clause or GNU GPLv2 licenses.linuxcontainers.org · read 8 Oct 2026
- Minimum requirement
- The listed hard requirements include a supported C library and a Linux kernel version 2.6.32 or later.linuxcontainers.org · read 8 Oct 2026
- Privileged container caution
- The documentation warns that privileged containers run processes as host root and should not give untrusted parties access to container root.linuxcontainers.org · read 8 Oct 2026
- Purpose
- LXC is a userspace interface to Linux kernel containment features for creating and managing system or application containers.linuxcontainers.org · read 8 Oct 2026
- Release support
- The project lists LXC 7.0 and 6.0 as long term support releases, with support through June 1, 2031 and June 1, 2029 respectively.linuxcontainers.org · read 8 Oct 2026
- Security features
- LXC uses kernel namespaces, AppArmor and SELinux profiles, seccomp policies, chroots, kernel capabilities, and cgroups to contain processes.linuxcontainers.org · read 8 Oct 2026
- Security limits
- LXC says it does not prevent denial-of-service attacks by default and advises configuring cgroup limits when running untrusted containers.linuxcontainers.org · read 8 Oct 2026
- Security model
- The project describes unprivileged containers as safe by design because container root maps to an unprivileged user outside the container.linuxcontainers.org · read 8 Oct 2026
- Security reporting
- Security issues can be reported by email to the project security address or through a private GitHub security advisory.linuxcontainers.org · read 8 Oct 2026
