[mmcgrana]

LXC is one of several isolation layers used in the Heroku dyno manifold to ensure process security and resource guarantees. Here is a more in-depth discussion of Heroku dyno isolation: http://devcenter.heroku.com/articles/dyno-isolation.

[klaruz]

So LXC is fully secure now if you stick to chroot?

http://www.mail-archive.com/[e-mail]/...

[shykes]

You can't contain root in lxc. It's great for unprivileged users, though.