Details

http://docs.docker.com/articles/registry_mirror/

Solution

Configure a local registry mirror and then start the Docker daemon as below-$> docker –registry-mirror= -dFor example,$> docker –registry-mirror=https-//10.0.0.2-5000 -d

Impact-The local registry mirror would need to be managed. It must have verified images that you
use in your environment and those images must be kept updated time to time.

Default Value-By default, there are no local registry mirrors setup on the host with Docker installation.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/514

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-7b.

Source

• Tenable.com/audits