Hacker News Reader

That’s awesome — thanks for sharing!

If you don’t mind me asking:

- Did you use LXC containers, or full VMs for each sandbox? - How did you handle SSH / network isolation? - Any tips on making provisioning faster or keeping resources efficient?

We’re using unprivileged LXC + SSH jump hosts on a single VM for cost efficiency. I’d love to hear what tradeoffs you found using the Proxmox API.

View on HN

My setup is quite purpose built. I use Orleans as the main fabric of our codebase. But since the Orleans cluster is a 'virtual computer' in a sense, you can't rely on anything outside the runtime, since you don't know which machine your code is executing on.

So a Grain calls Proxmox with a generated SSH Key / CloudInit, then persists that to state, then deploys an Orleans client which connects to the cluster for any client side C# execution. There's lots you could do for isolated networks with the LXC setup, but my uses didn't require it.

Proxmox handles the horizontal scaling of the hardware. Orleans handles the horizontal scaling of the codebase.

Reply on news.ycombinator.com