KVM Driver

Mon, 17 Feb 2025 00:00:00 +0000

Requirements

To support virtualization, the Hosts will need a CPU with Intel VT or AMD’s AMD-V features. KVM’s Preparing to use KVM guide will clarify any doubts you may have regarding whether your hardware supports KVM.

KVM will be installed and configured after following the KVM Host Installation section.

Considerations & Limitations

Try to use virtio whenever possible for both networks and disks. Using emulated hardware for networks and disks, will have an impact on performance and will not expose all the available functionality. For instance, if you don’t use virtio for the disk drivers, you will not be able to exceed a small number of devices connected to the controller, meaning that you have a limit when attaching disks and it will not work while the VM is running (live disk-attach).

LXC Driver

Mon, 17 Feb 2025 00:00:00 +0000

Requirements

LXC version >= 3.0.3 installed on the Host.
cgroup version 1 or 2 Hosts are required to implement resource control operations (e.g., CPU pinning, memory or swap limitations).

Considerations & Limitations

Privileged Containers and Security

In order to ensure security in a multitenant environment, by default the containers created by the LXC driver will be unprivileged. The unprivileged containers will be deployed as root. Sub UID/GID range 600100001-600165537 will be used for mapping users/groups in order to increase security in case a malicious agent is able to escape the container.

Hypervisor Configuration on

KVM Driver

Requirements

Considerations & Limitations

LXC Driver

Requirements

Considerations & Limitations

Privileged Containers and Security