Is LXD affected by this security hole?

[najibnour]

Good Morning, I have found this article related to docker wondering if lxd is affected by this.

Doomsday Docker Security Hole Uncovered - Slashdot

[stgraber (Stéphane Graber)]

This has already been asked and answered.

Runc exploit does it affect LXD?

Short answer is “No” but lets got into more details. This security issue only affects privileged containers, if you’re only running unprivileged containers (the default for LXD), then you’re perfectly safe. If you are running privileged containers and are using the LXD snap, you are perfectly safe due to the binary being on a read-only filesystem (the snap squashfs). If you are running privileged containers and are using an installation of LXD other than the snap, then you are still not likel…