Running services with LXCs is much more straightforward than trying to on bare metal ...

It may be an experimental feature, but it's worth checking out if you're a self-hosting enthusiast ...

Part I of this Deep Dive on containers introduces the idea of kernel control groups, or cgroups, and the way you can isolate, limit and monitor selected userspace applications. Here, I dive a bit ...

I have a Proxmox host with an unprivileged container, running Frigate NVR in Docker, because Docker is the only supported way to run Frigate. I could use a VM but then I'd have to pass the whole iGPU ...