From what I've seen Docker has added a lot of security functionality in the last couple of releases which is great, although I'd like to see more work at the Do

From what I've seen Docker has added a lot of security functionality in the last couple of releases which is great, although I'd like to see more work at the Docker engine level on authentication and authrorization which still feels kind of all or nothing (I know there's a plugin framework, but there's not a load of good options there at the moment). Also at the moment implementing additional security options is a bit bitty, as the planned security profile work hasn't landed yet. the other thing to note is that when deploying Docker engine the defaults tend to go towards making everything work and aren't necessarily the most secure, so its very much worth doing some additional hardening where possible. Specfically things like - enabling user namespacing - disabling icc - removing capabilities (e.g. NET_RAW) - not using the default docker0 network - disabling userland proxy There is a CIS standard which is pretty much up to date and has some, hopefullly, decent sets of things to look at hardening (disclaimer I helped work a bit on the latest version...)