4 ms·
This makes me feel good about going with CentOS for Docker. Red Hat has a custom, stable Docker version which is rock-solid (albeit somewhat old, 1.10).
by lima 10y ago
This makes me feel good about going with CentOS for Docker. Red Hat has a custom, stable Docker version which is rock-solid (albeit somewhat old, 1.10).
- marcoceppi 10y agoSomewhat old? That's basically ancient.
- raesene6 10y agoDepending on your use case, that may not be such a great idea. Unless Red Hat have back-ported it, 1.10 misses several important security advances that have come into Docker in recent versions...
- SEJeff 10y agoRedhat also has a lot of security features not in upstream docker due to docker, inc not accepting them: Source: https://github.com/projectatomic/docker/tree/410e23a7eeb52d4e7eadf4ee3fcee18283b8cb00#red-hat-patches https://github.com/projectatomic/docker/tree/410e23a7eeb52d4...
- justincormack 10y agoThat seccomp patch reduces rather than increases security. None of the others, other than back ports, are security features.
- SEJeff 10y agoDisabling the docker hub certainly is.
- justincormack 10y agoIn what way? It changes a default, but it only changes namespaces, not security.
- Thaxll 10y agodocker - rock-solid - v1.10 there is something odd in that sentence.
- alexellisuk 10y agoTechnically runc and the Kernel are setting up/providing your containers. Docker Engine is a platform for managing containers/images.
- user5994461 10y agodocker-engine is the name of the package.
- EtienneK 10y agoCenter for Internet Security Docker Benchmark, rule 1.5: Keep Docker up to date [1] [1] https://benchmarks.cisecurity.org/tools2/docker/CIS_Docker_1.12.0_Benchmark_v1.0.0.pdf https://benchmarks.cisecurity.org/tools2/docker/CIS_Docker_1...
- tcrews 10y ago"Keep a tab on these product updates and upgrade as frequently as when new security vulnerabilities are fixed." https://www.docker.com/docker-cve-database https://www.docker.com/docker-cve-database
- lima 10y agoBackports. I saw Docker break more than once after supposedly stable releases with security fixes.
- deleted 10y ago[deleted]
- therealmarv 10y agoWhen going CS Docker Engine you also have the latest (CS) Engine: https://docs.docker.com/cs-engine/install/ https://docs.docker.com/cs-engine/install/
- fapjacks 10y agoRed Hat has a vested interest in the failure of Docker. So... It's up to you if you want to continue using (or trusting!) any "Docker" software released by Red Hat.
- bigmac 10y agoDo not use Docker distributed by Red Hat, full stop. It has been irresponsibly patched to be insecure. They disable important seccomp filters. Instead, install using instructions here: https://docs.docker.com/engine/installation/linux/centos/#/install-with-yum https://docs.docker.com/engine/installation/linux/centos/#/i...