this post was submitted on 20 Feb 2025
40 points (95.5% liked)

Selfhosted

61129 readers
252 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
ayyy@sh.itjust.works
curbstickle@anarchist.nexus
curbstickle_lw@lemmy.world
40
Docker in LXC vs VM (lemmy.ml)
submitted 1 year ago by mr_jaaay@lemmy.ml to c/selfhosted@lemmy.world
55 comments fedilink hide all child comments
 

I run a small server with Proxmox, and I'm wondering what are your opinions on running Docker in separate LXC containers vs. running a specific VM for all Docker containers?

I started with LXC containers because I was more familiar with installing services the classic Linux way. I later added a VM specifically for running Docker containers. I'm thinking if I should continue this strategy and just add some more resources to the docker VM.

On one hand, backups seem to be easier with individual LXCs (I've had situations where I tried to update a Docker container but the new container broke the existing configuration and found it easiest just to restore the entire VM from backup). On the otherhand, it seems like more overhead to install Docker in each individual LXC.

you are viewing a single comment's thread
view the rest of the comments
[–] MangoPenguin@lemmy.blahaj.zone 11 points 1 year ago* (last edited 1 year ago) (2 children)

Regardless of VM or LXC, I would only install docker once. There's generally no need to create multiple docker VMs/LXCs on the same host. Unless you have a specific reason; like isolating outside traffic by creating a docker setup for only public services.

Backups are the same with VM or LXC on Proxmox.

The main advantages of LXC that I can think of:

  • Slightly less resource overhead, but not much (debian minimal or alpine VM is pretty lightweight already).
  • Ability to pass-through directories from the host.
  • Ability to pass-through hardware acceleration from a GPU, without passing through the entire GPU.
  • Ability to change CPU cores or RAM while it's running.
[–] possiblylinux127@lemmy.zip 3 points 1 year ago

Also LXC shares the host filesystem to there is less concern with corruption due to power loss.

[–] non_burglar@lemmy.world 2 points 1 year ago* (last edited 1 year ago) (2 children)

I use individual lxc for each docker compose so I don't have to revert 8 services at once if I need to restore.

I would also argue that an alpine lxc runs in 22mb ram by itself ... Significantly smaller footprint on disk and in memory. But most importantly, lxc can actually share memory space effectively, one doesn't need to reserve blocks of ram.

[–] sugar_in_your_tea@sh.itjust.works 6 points 1 year ago* (last edited 1 year ago) (2 children)

You don't have to revert 8 services, you can stop/start them independently: docker compose stop <service name>.

This is actually how I update my services, I just stop the ones I want to update, pull, and restart them. I do them one or two at a time, mostly to mitigate issues. The same is true for pulling down new versions, my process is:

  1. edit the docker-compose file to update the image version(s) (e.g. from 1.0 -> 1.1, or 1.1 -> 2.0); I check changelog/release notes to check for any manual upgrade notices
  2. pull new images (doesn't impact running services)
  3. docker compose up -d brings up any stopped services using new image(s)
  4. test
  5. go back to 1 until all services are done

I do this whenever I remember, and it works pretty well.

[–] non_burglar@lemmy.world 2 points 1 year ago

Oh, nice. Thanks!

This is me showing my docker ignorance, I suppose.

[–] Croquette@sh.itjust.works 2 points 1 year ago

I split my docker containers so that I can selectively backup what I want easily on proxmox

For example, I am currently running an Abiotic Factor server that I don't care to backup. So I just dont add the container to the backups and I am done.

[–] MangoPenguin@lemmy.blahaj.zone 2 points 1 year ago (1 children)

How do you handle backups? Install restic or whatever in every container and set it up? What about updates for the OS and docker images, watchtower on them I imagine?

It sounds like a ton of admin overhead for no real benefit to me.

[–] non_burglar@lemmy.world 2 points 1 year ago

I just snapshot the parent lxc. The data itself isn't part of the container at any level, so if I bung up compose yml or env, I can just flip it back. The only real benefit is that all my backups are in the same place in the same format.

Like I'm not actually opposed to managing docker in one unit, I just haven't got there yet and this has worked so far.

If I were to move to a single platform for several docker, what would you suggest? For admin and backups?