Yeah, meanwhile I’ll keep using LXD / Incus for both containers and VMs.
Incus has a few advantages: an image repository, a nicer container manager (cli tools) and sane security defaults. By default Incus assumes your containers should be isolated and secure environments while systemd-nspawn is more about quick and dirty containers useful to compile something or run some trusted task.
The thing with Incus is that you get the image repository and manager and the permissions applied to containers make them isolated and secure environments by default running on another user etc etc
That actually could be really handy. I’ll have to check it out once this release moves downstream.
Yeah, meanwhile I’ll keep using LXD / Incus for both containers and VMs.
Incus has a few advantages: an image repository, a nicer container manager (cli tools) and sane security defaults. By default Incus assumes your containers should be isolated and secure environments while
systemd-nspawn
is more about quick and dirty containers useful to compile something or run some trusted task.This is really hard to read.
Yeah, I was typing from my phone while being distracted by other people. Fixed now.
Thanks, that’s much easier to read. :)