Allow Docker to make changes to iptables
Details https://docs.docker.com/v1.8/articles/networking/ Solution Do not run the Docker daemon with ‘–iptables=false’ parameter.For example, do not start the Docker daemon as...
- Home
- Security Hardening
- CIS Docker 1.11.0 V1.0.0 L1 Docker
CIS Docker 1.11.0 V1.0.0 L1 Docker
Bind incoming container traffic to a specific host interface
Details https://docs.docker.com/articles/networking/#binding-container-ports-to-the-host Solution Bind the container port to a specific host interface on the desired host port.For example,docker run –detach...Configure TLS authentication for Docker daemon – tlscacert
Details It is possible to make the Docker daemon to listen on a specific IP and port and any other...Configure TLS authentication for Docker daemon – tlscert
Details It is possible to make the Docker daemon to listen on a specific IP and port and any other...Configure TLS authentication for Docker daemon – tlskey
Details It is possible to make the Docker daemon to listen on a specific IP and port and any other...Configure TLS authentication for Docker daemon -tlsverify
Details It is possible to make the Docker daemon to listen on a specific IP and port and any other...Create a user for the container
Details Create a non-root user for the container in the Dockerfile for the container image.It is a good practice to...Disable operations on legacy registry (v1)
Details The latest Docker registry is v2. All operations on the legacy registry version (v1) should be restricted.Docker registry v2...Do not install unnecessary packages in the container
Details https://docs.docker.com/userguide/dockerimages/ 2.http://www.livewyer.com/blog/2015/02/24/slimming-down-your-docker-containers-alpine-linux 3.https://github.com/progrium/busybox Solution At the outset, do not install anything on the container that does not justify the...Do not map privileged ports within containers
Details The TCP/IP port numbers below 1024 are considered privileged ports. Normal users and processes are not allowed to use...