An isolated environment for a new employee?

Question

linux

Hello.
For a long time, my colleague and I were the only developers, we have our own local server with nginx + php-fpm + mysql + git.
There are all our projects on the local server, and when another developer came to us, the task was to give him the opportunity to use everything the same, but in an isolated environment, because. the employee is still on probation and there is no 100% confidence in him.
There is an Ubuntu server on the server, there is administration experience, but there is no experience with user isolation.
As I understand it, there is a lot of fuss with chroot, and the easiest option would be to raise a virtual machine.
Hence the question - which virtual machine to choose for these purposes? What are the pitfalls?
Thanks in advance!

Answer 1

qemu with kvm. Works great over ssh, built-in vnc server, all kernel modules are already in the kernel.

Answer 2

lxc

Answer 3

I join the previous speaker, lxc is the right choice.
a good description of lxc, by the way, was in one of the recent issues ][ .

Answer 4

you can make a lightweight version, sftp-chroot + a separate php-fpm worker.