I realise that you are making a joke, but here’s what I used it for:
Debian VM as my main desktop
Debian VN as my main Docker host
Windows VM for a historical application
Debian VM for signal processing
Debian VM for a CNC
At times only the first two or three were running. I had dozens of purpose built VM directories for clients, different hardware emulation, version testing, video conferencing, immutable testing, data analysis, etc.
My hardware failed in June last year. I didn’t lose any data, but the hardware has proven hard to replace. Mind you, it worked great for a decade, so, swings and roundabouts.
I’m currently investigating, evaluating and costing running all of this in AWS. Whilst it’s technically feasible, I’m not yet convinced of actual suitability.
The cost will be oh, so much more than you’re expecting. I have not been at a shop where they didn’t later go “oh shit. Repatriate that stuff so it doesn’t cost us a mint.”
In my case, I’m not a fan of running unknown code on the host. Docker and LXC are ways of running a process in a virtual security sandbox. If the process escapes the sandbox, they’re in your host.
If they escape inside a VM, that’s another layer they have to penetrate to get to the host.
It’s not perfect by any stretch of the imagination, but it’s better than a hole in the head.
One docker container per VM just to maximise the ram usage.
I realise that you are making a joke, but here’s what I used it for:
At times only the first two or three were running. I had dozens of purpose built VM directories for clients, different hardware emulation, version testing, video conferencing, immutable testing, data analysis, etc.
My hardware failed in June last year. I didn’t lose any data, but the hardware has proven hard to replace. Mind you, it worked great for a decade, so, swings and roundabouts.
I’m currently investigating, evaluating and costing running all of this in AWS. Whilst it’s technically feasible, I’m not yet convinced of actual suitability.
The cost will be oh, so much more than you’re expecting. I have not been at a shop where they didn’t later go “oh shit. Repatriate that stuff so it doesn’t cost us a mint.”
Yeah, I’ve been using AWS for many years. I’m familiar :)
Hetzner has better pricing if you don’t need to scale down dynamically.
That just sounds like QubesOS with extra steps
I unironically do this in proxmox. Keeps things nice and separate and i still have plenty ram left.
Any reason for not using LXC as PX has native support?
In my case, I’m not a fan of running unknown code on the host. Docker and LXC are ways of running a process in a virtual security sandbox. If the process escapes the sandbox, they’re in your host.
If they escape inside a VM, that’s another layer they have to penetrate to get to the host.
It’s not perfect by any stretch of the imagination, but it’s better than a hole in the head.
I do use LXC but those are still pretty much a virtual machine.
Fair point.