Developer tools · container runtime
LXC
Hacker Approved
Lightweight Linux containers that feel like full VMs, with a persistent OS, low overhead and good isolation. Critics note they are not a real security boundary.
Summarized from 53 comments.
Lightweight Linux containers that feel like full VMs, with a persistent OS, low overhead and good isolation. Critics note they are not a real security boundary.
- recommend
- 34
- criticize
- 10
- months recommended
- 12 of 13
Why people love it
Feels like a VM but lightweight · 5
all the host-level management of a non-ephemeral VM (including snapshots!), without the every-machine-has-its-own-kernel overhead
Aug 2026 · commentInstead I'm using LXC containers in a VM, which are containers that look and feel like a VM.
Jan 2026 · commentLXC containers look and feel like VMs, but are very lightweight.
Jan 2026 · commentLow overhead, fast to start · 5
I've been running perfectly usable alpine lxc system containers on as low as 32MB
Jan 2026 · commentthe former allows you to have lighter & faster (share kernel)
Jul 2026 · commentLXC/Incus can be used if you want the shorter starting time
Mar 2026 · commentGood isolation for its weight · 5
That's enough to catch mishaps like deleting all your sht while still being a reasonable transparent isolation layer.
Dec 2025 · commentrunning docker in an LXC containers grants a lot more isolation than docker on it's own
Dec 2025 · commentUnprivileged LXCs get pretty close. Less unified design wise but on some aspects better
May 2026 · commentPersistent, reproducible dev environments · 4
This is by far the best option to isolate and easily create development environments that I found.
Nov 2025 · commentLXC is probably better suited for reproducible build/development environments, over Docker.
Jul 2026 · commentI like using LXC containers, eg full persistent OS and you can do docker if you want
Feb 2026 · comment
What people warn about
Not a real security boundary · 2
It's basically advanced chroot with more security limitations
Nov 2025 · commentDocker/LXC is not a security boundary
Sep 2026 · commentUnreliable and fragile in practice · 3
a miserable experience in the early days because the paint was still so fresh
Jan 2026 · commentBut it was just too unreliable and we swapped it out
Oct 2026 · commentit was all a house of cards
Oct 2026 · comment
What hackers pick instead
- PodmanA daemonless, rootless-by-default Docker alternative with systemd and Kubernetes-style pod integration; expect occasional Docker incompatibilities and extra setup work.276recommend
- OrbStackA fast, lightweight Docker Desktop replacement for macOS that runs containers and Linux VMs with little memory overhead; the per-seat license and closed-source model put some teams off.97recommend
- Apple containerApple's free, lightweight Linux container runtime for Mac; people value its per-container VM isolation and fast startup. Common caveats: missing Docker features and networking bugs.56recommend
- gVisorRecommended as a sandbox that intercepts syscalls so workloads never touch the host kernel, and it works without KVM. Main caveat: performance overhead and compatibility gaps.45recommend
- ColimaFree, open source Docker Desktop alternative for macOS that is easy to set up and reliable. Critics say it is slow.39recommend
Every quote
The 40 most detailed of 53 comments. Each links to the original.
all the host-level management of a non-ephemeral VM (including snapshots!), without the every-machine-has-its-own-kernel overhead
Recommends · Aug 2026 · in “The web server deployment model breaks at hobby scale”
That's enough to catch mishaps like deleting all your sht while still being a reasonable transparent isolation layer.
Recommends · Dec 2025 · in “Ask HN: How are you sandboxing coding agents?”
This is by far the best option to isolate and easily create development environments that I found.
Recommends · Nov 2025
Instead I'm using LXC containers in a VM, which are containers that look and feel like a VM.
Recommends · Jan 2026 · in “Show HN: yolo-cage – AI coding agents that can't exfiltrate secrets”
LXC is probably better suited for reproducible build/development environments, over Docker.
Recommends · Jul 2026 · in “Stop Using OpenCode”
running docker in an LXC containers grants a lot more isolation than docker on it's own
Recommends · Dec 2025 · in “I got hacked: My Hetzner server started mining Monero”
Unprivileged LXCs get pretty close. Less unified design wise but on some aspects better
Recommends · May 2026 · in “Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised”
I like using LXC containers, eg full persistent OS and you can do docker if you want
Recommends · Feb 2026 · in “Coding Agent VMs on NixOS with Microvm.nix”
I've been running perfectly usable alpine lxc system containers on as low as 32MB
Recommends · Jan 2026 · in “Is the RAM shortage killing small VPS hosts?”
It is currently my preferred "temp dev env" that behaves like a full system.
Recommends · Sep 2026 · in “Show HN: Drop – A rootless Linux sandbox with gVisor support”
what not an unprivledged LXC container? The surface area is far smaller
Recommends · Jul 2026 · in “Ditching Vagrant: VMs with KVM and Virsh on Debian”
LXC containers look and feel like VMs, but are very lightweight.
Recommends · Jan 2026 · in “Code and Let Live”
by far the best balance of performance, isolation and control
Recommends · Dec 2025 · in “Show HN: A lightweight UI to manage my LXC dev environments”
the former allows you to have lighter & faster (share kernel)
Recommends · Jul 2026 · in “Show HN: Clawk – Give coding agents a disposable Linux VM, not your laptop”
LXC/Incus can be used if you want the shorter starting time
Recommends · Mar 2026 · in “Moving from GitHub to Codeberg, for lazy people”
unprivileged lxc/lxd container takes 2s to set up
Recommends · Mar 2026 · in “Nvidia NemoClaw”
bonus point that LXC containers feel like a VM
Recommends · Feb 2026 · in “Coding Agent VMs on NixOS with Microvm.nix”
the efficiency makes up for the initial hassle
Recommends · Oct 2026
a miserable experience in the early days because the paint was still so fresh
Criticizes · Jan 2026 · in “What Has Docker Become?”
It's basically advanced chroot with more security limitations
Criticizes · Nov 2025 · in “Ubuntu LTS releases to 15 years with Legacy add-on”
But it was just too unreliable and we swapped it out
Criticizes · Oct 2026 · in “Docker is weird”
Docker/LXC is not a security boundary
Criticizes · Sep 2026 · in “OpenAI bots knew about the RubyGems caching vulnerability”
it was all a house of cards
Criticizes · Oct 2026 · in “Docker is weird”
Improving libvirt and making virtualization a first-class OS feature with a library interface
Recommends · Mar 2026 · in “A Decade of Docker Containers”
I ended up creating an LXC on my homelab and providing it access there
Recommends · Mar 2026 · in “Don't YOLO your file system”
I have learned a ton with LXC and sort of moving away from VMs.
Recommends · Feb 2026 · in “Two kinds of AI users are emerging. The gap between them is astonishing”
I just throw it into an unpriviledged LXC and call it a day.
Recommends · Jan 2026 · in “Running Claude Code dangerously (safely)”
The LXC way of getting an up per container is pretty great
Recommends · Oct 2026 · in “Docker is weird”
Containers like LXC and Docker were a bit easier to setup
Recommends · Mar 2026 · in “A Decade of Docker Containers”
I like LXC containers and how they integrate with PBS.
Recommends · Jan 2026 · in “I Like GitLab”
This appears to be an LXC-style alternative for macOS
Mixed · Jun 2026 · in “macOS Container Machines”
get the same effect on my own hardware and for free
Recommends · Jan 2026 · in “Code and Let Live”
I might switch to LXC to reduce the weight somewhat
Mixed · Feb 2026 · in “Sandboxing AI Agents in Linux”
Linux has lxc, wich is much closer to Jails afaik.
Recommends · Mar 2026 · in “Technical Beauty: FreeBSD Jails”
Check out LXC and the wider Incus set of projects
Recommends · Jan 2026 · in “Code and Let Live”
proxmox+lxc on zfs storage works fine in proxmox
Recommends · Mar 2026 · in “From Proxmox to FreeBSD and Sylve in Our Office Lab”
Incus is amazing, or lxc and wayland in general.
Recommends · Nov 2025 · in “Incus-OS: Immutable Linux OS to run Incus as a hypervisor”
having performance of lxc and dx of docker
Recommends · Nov 2025 · in “Show HN: Proxmox-GitOps: Container Automation Framework”
Much prefer LXC + IaC to rebuild them
Recommends · Oct 2026 · in “What I self-host”
It’s one of the reasons I like LXCs.
Recommends · Oct 2026 · in “Linux containers in 500 lines of code (2016)”
Counts from 1,795,640 Hacker News comments, Nov 2025 to Nov 2026. How we count · Report a mistake