How safe is it to use LXC containers for various tasks on the server?

Question

linux

Good day.
How safe and appropriate is the use of LXC containers for a variety of tasks.
For example, if you place all services in different containers and forward ports through iptables, setting some rules.
Is it possible somehow by accessing the container's console to access the host machine?
As for me, you can make regular backups of containers and when there is a deviation in monitoring or a specific attack, just

Answer 1

How safe and appropriate is the use of LXC containers for a variety of tasks.
I think that purely hypothetically - there may be similar bugs in the system, but in practice - hardly anyone will tell you about them.

For example, if you place all services in different containers and forward ports through iptables, setting some rules.

For this, if my memory serves me, there is Docker.

As for me, you can make regular backups of containers and when there is a deviation in monitoring or a specific attack, just

It is possible, but this is often a problem. For example, to make a database backup without a container, just run the utility for creating database backups. To make a backup of the database along with the container, you will need to stop the container, make a full backup of it and start it again ... And if you also have ZFS there, then this is another layer of potential problems.