I'm trying to decide between "jailing" certain applications and I know the trade-offs of KVM versus LXC and how I can use them both.
Lately I came across UML (User-Mode Linux) again and was wondering how it compares with respect to security and resource consumption (or overhead, if you will).
Where can I find a comparison like that, or does anyone here know how they compare?
- what is the disk I/O and CPU overhead?
- how strict is the separation and how secure is the host from what's going on in the guest?