LXC is a low-level Linux container runtime that provides system containers through kernel security features like namespaces, mandatory access control, and control groups.
LXC addresses the need for lightweight virtualization without the overhead of separate kernels and hardware simulation. It achieves this by leveraging kernel-level isolation mechanisms to create containers that behave like virtual machines but with significantly lower resource consumption. The runtime has been actively developed since 2008 and is used in production environments worldwide. A key distinguishing feature is its pioneering support for unprivileged containers, which run without elevated privileges by mapping host UIDs and GIDs to unprivileged ranges inside the container through kernel user namespaces. This security model minimizes the attack surface by requiring only three setuid helpers for full functionality while running everything else as the unprivileged user.
Developers should choose LXC if they need system containers that closely replicate VM-like environments while maintaining security through kernel isolation features. It suits projects requiring fine-grained control over container configuration, particularly those prioritizing security and the ability to run containers without root privileges. The tool is appropriate for teams with experience tuning container security settings, as LXC's configuration management allows experienced users to customize behavior to specific requirements. It is less suitable for applications requiring high-level orchestration or simplified container management abstractions.
The project maintains active continuous integration testing across Linux platforms with fuzzing coverage through both OSS-Fuzz and CIFuzz. The codebase undergoes security-focused development practices as evidenced by its participation in formal security assessment programs. Core contributors include individuals who helped implement containerization features in the Linux kernel itself, bringing deep expertise in the underlying technologies.
