Running services with LXCs is much more straightforward than trying to on bare metal ...

I have a Proxmox host with an unprivileged container, running Frigate NVR in Docker, because Docker is the only supported way to run Frigate. I could use a VM but then I'd have to pass the whole iGPU ...

Deploying containers the better way.

Part I of this Deep Dive on containers introduces the idea of kernel control groups, or cgroups, and the way you can isolate, limit and monitor selected userspace applications. Here, I dive a bit ...