3 ms·
What is the state of Docker container security? Is it still the case that root inside of a container trivially equals root outside of the container, or has that
by AgentME 9y ago
What is the state of Docker container security? Is it still the case that root inside of a container trivially equals root outside of the container, or has that been addressed? I thought it had been. I've been finding it hard to find an answer to this.
- hacknat 9y agoIt has been partially addressed you can enable username spacing in docker, but it is not the default. Additionally per tenant user namespacing is not yet possible with docket (though it is in the kernel).
- TheDong 9y agoYou'll have a hard time finding people who will say you are secure, but there are no known vulnerabilities allowing breaking out of a default-configuration docker container at this time. JessFraz has been running https://contained.af/ https://contained.af/, which is a much more locked-down than the default container, for ages, and no one has broken out and captured the flag yet. If you do some legwork, it's not too bad currently.