In my previous experience with CTs (10-12 years ago) my biggest complaint about OpenVZ was the fact that users were able to easily abuse/circumvent system resources. The limits were more like something you could "informative see" in the CT/OS information, and less about "enforcing".
For example I was assigning 1CPU and 1GB RAM but the user - if insistent enough - was able to basically circumvent any of those limits and use the hardware at maximum capacity. As a result the services were advantageous for abusive customers but lousy for trustworthy customers.
Is this still the case with "modern LXC"?
For example I was assigning 1CPU and 1GB RAM but the user - if insistent enough - was able to basically circumvent any of those limits and use the hardware at maximum capacity. As a result the services were advantageous for abusive customers but lousy for trustworthy customers.
Is this still the case with "modern LXC"?