Docker on Proxmox: LXC vs VM and Firewall Rules That Matter

A home lab builder compares running Docker in LXC containers versus full VMs on Proxmox, finding LXC offers near-native performance with lower overhead but weaker isolation. The article details enabling nesting in unprivileged LXC containers for Docker and recommends datacenter-level security groups over per-container firewall rules. Practical advice includes matching isolation to risk: trusted workloads in LXC, untrusted ones in VMs.