Deploying nested structure of containers on bare metal

[TCB13]

Most certainly, what you’re looking for is nested containers.

https://ubuntu.com/blog/nested-containers-in-lxd

What does security.nesting=true?

Interesting… Can I add security.nesting true and lxc config set net-01 security.privileged true to the profile? How to do it? just add these strings to file under the section config:?

For extra security you might also want to have the first level to be VM’s instead of containers:

Running virtual machines with LXD 4.0

Introduction LXD 4.0 natively supports virtual machines and thanks to a built-in agent, can have them behave almost like containers. Images Community images (images:) We are producing VM images daily for the following distributions: Arch Linux CentOS (7 and up) Debian (8 and up) Fedora Gentoo OpenSUSE Ubuntu For those that have cloud variants for container images, they have matching cloud variants for VM too. Those images are currently the preferred ones for all of those distributions as…

This way your users will be a lot more isolated from the bare metal machine.