3 ms·
Well containers use security features in the kernel by definition in their implementations. It’s pretty easy to make an argument that containers are a security
by kevinsundar 4y ago
Well containers use security features in the kernel by definition in their implementations.
It’s pretty easy to make an argument that containers are a security layer especially in their default state.
When you start adding capabilities and patching through the docker socket then things get insecure real quick.
- dijit 4y agoYou can use similar primitives that docker is using to achieve security hardening. Even docker themselves have a detailed dossier of documents saying they’re not a security layer (but that they’d like to be). From FAQ: > Is Docker a secure platform? > The Docker platform itself isn’t inherently secure or insecure. While containers may be isolated from other processes on a host, additional security measures are still crucial to prevent container breakout and other types of vulnerabilities. An effective container security strategy for building and deploying containers is the best way to reduce the risk of a vulnerability, and in turn, an attack. Just like any other technology platform, following security best practices is the key to mitigating potential threats.