Understanding Docker Security and Best Practices

#1

Post by adamveld12 » Wed, May 06, 2015, 5:23 PM UTC

Understanding Docker Security and Best Practices
blog.docker.com

Re: Understanding Docker Security and Best Practices

#2

Post by zobzu » Wed, May 06, 2015, 6:06 PM UTC

Them registration links :(

Re: Understanding Docker Security and Best Practices

#3

Post by ams6110 » Wed, May 06, 2015, 6:09 PM UTC

Why do I need to take any action to securely deply Docker containers? Why aren't they secure by default. What I should need to study is how to run them insecurely, should I have that need. Secure should be the default mode.

Re: Understanding Docker Security and Best Practices

#4

Post by shitlord » Wed, May 06, 2015, 6:30 PM UTC

zobzu wrote: post #2

Them registration links :(

Yeah, that was obnoxious. The only link on the page I wanted to check out, I couldn't.

Re: Understanding Docker Security and Best Practices

#5

Post by Zikes » Wed, May 06, 2015, 6:44 PM UTC

ams6110 wrote: post #3

Why do I need to take any action to securely deply Docker containers? Why aren't they secure by default. What I should need to study is how to run them insecurely, should I have that need. Secure should be the default mode.

Security is not one size fits all, especially when a container can contain conceivably anything.

Re: Understanding Docker Security and Best Practices

#6

Post by akerl_ » Wed, May 06, 2015, 6:45 PM UTC

ams6110 wrote: post #3

Why do I need to take any action to securely deply Docker containers? Why aren't they secure by default. What I should need to study is how to run them insecurely, should I have that need. Secure should be the default mode.

This would be really great if security was a binary switch, but it's not. The most secure way for them to write Docker would be if, when started, it ran `shutdown -h now`. In the real world, designers of systems and software are required to make security decisions and determine the best course for providing security and usability.

I don't agree with several decisions that the Docker team has made, but to so grossly oversimplify the matter at hand is unhelpful.

Re: Understanding Docker Security and Best Practices

#7

Post by markbnj » Wed, May 06, 2015, 6:55 PM UTC

zobzu wrote: post #2

Them registration links :(

I'm with you. See a link to a white paper on Docker security. Oh boy! Click on link. See registration form. Bummer.

Re: Understanding Docker Security and Best Practices

#8

Post by peterwaller » Wed, May 06, 2015, 7:00 PM UTC

zobzu wrote: post #2

Them registration links :(

I would normally not comment to say "seriously, :/", but this time I feel it is warranted so that people can see how much of an inconvenience this is. As a security sensitive person, I don't much feel like putting a load of information into a form and agree to some random terms I'm not going to read. Yuck.

Re: Understanding Docker Security and Best Practices

#9

Post by justincormack » Wed, May 06, 2015, 7:23 PM UTC

zobzu wrote: post #2

Them registration links :(

You dont have to register, just select no for the first three options.

Re: Understanding Docker Security and Best Practices

#10

Post by yarrel » Wed, May 06, 2015, 7:27 PM UTC

markbnj wrote: post #7

zobzu wrote: post #2

Them registration links :(

I'm with you. See a link to a white paper on Docker security. Oh boy! Click on link. See registration form. Bummer.

I just downloaded the whitepaper without registering.

Maybe they stopped requiring it?

Discouraging people from following security best practice would be counter-productive.