Enroot vs LXD

Enroot is a free, open-source Linux command-line utility that turns traditional container and operating-system images into unprivileged sandboxes. It is aimed at high-performance or virtualized environments where portability and reproducibility matter and additional isolation is not required. Enroot runs without a daemon and supports unprivileged multi-user use without a setuid binary. Linux user and mount namespaces preserve filesystem separation, while the project provides little to no isolation. The command line covers batch, bundle, create, exec, export, import, list, remove, and start operations. It imports known formats including Docker, with the README reporting a 3x to 5x speedup for large Docker-image imports. Built-in GPU support uses libnvidia-container, and hooks can add NVIDIA support or Mellanox host MOFED. Runtime settings come from enroot.conf or higher-priority environment variables. Standard and hardened package flavors are available.

LXD is an open-source platform for managing system containers and virtual machines on Linux. It brings LXC-based containers and KVM-based virtual machines together, with images for many Linux distributions and Windows virtual machines. Management options include a command line, REST API, web UI and third-party tools; the same HTTP API supports local and remote access. An official web UI is available by default starting with LXD 5.21.0 LTS. Features include resource limits, scheduled and expiring snapshots, projects, hardware passthrough, live migration and advanced networking. Containers run unprivileged by default, and virtual machines support UEFI Secure Boot and vTPM. LXD can run from a laptop to a data-center deployment; documentation describes clusters of up to 50 servers with thousands of instances. LXD is free, with the open-source plan listed at free. Ubuntu Pro Personal is also free for up to five physical Ubuntu systems. Enterprise workstation and server subscriptions are $25 a year and $500 a year, respectively.