Details
Avoid experimental features in production.
Rationale:
Experimental is now a runtime docker daemon flag instead of a separate build. Passing –experimental as a runtime flag to the docker daemon, activates experimental features. Experimental is now considered a stable release, but with a couple of features which might not have tested and guaranteed API stability.
Solution
Do not pass –experimental as a runtime parameter to the docker daemon.
Impact:
None
Default Value:
By default, experimental features are not activated on the docker daemon.
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Unix.