ByteBrief
We're a portrait publication through and through. Turn your phone back and your briefing picks up right where you left it.
(We tried widescreen once. It wasn't us.)

Privileged LXCs map root to the host's root, granting unrestricted access. A breach can infect the entire node. Unprivileged LXCs use high-numbered accounts with fewer permissions, reducing escape risk. Bind mounts enable SMB/NFS shares for unprivileged containers.
Tap to vote and see what everyone thinks.
Summary by ByteBrief