Both VM and LXC options are fine. I think I just followed a guide that suggested VM route. From what I remember: VM was easier to back up, more isolation, something with the iptables being easier to edit.