[tarruda]

> How does LXD compare to Docker?

They have different use cases.

Docker runs single applications/daemons.

LXD runs a whole Linux system by spawning an init process which takes care of spawning and managing other processes that compose a system.

A great security feature of LXD is that these child systems are run in user namespaces and don't have root privileges in the host. Docker runs with full root privileges, and malicious code can easily escape the container and take over the host.