CIS Docker 1.12.0 V1.0.0 L1 Docker

Details http://windsock.io/the-docker-proxy/ 2.https://github.com/docker/docker/issues/14856 3.https://github.com/docker/docker/issues/22741 4.https://docs.docker.com/engine/userguide/networking/default_network/binding/ Solution Run the Docker daemon as below-dockerd –userland-proxy=falseImpact-Some systems with older Linux kernels may not...

Details Do not enable swarm mode on a docker engine instance unless needed.By default, a Docker engine instance will not...

Details https://docs.docker.com/userguide/dockerimages/ 2.http://www.livewyer.com/blog/2015/02/24/slimming-down-your-docker-containers-alpine-linux 3.https://github.com/progrium/busybox Solution At the outset, do not install anything on the container that does not justify the...

Details The TCP/IP port numbers below 1024 are considered privileged ports. Normal users and processes are not allowed to use...

Details https://docs.docker.com/userguide/dockervolumes Solution Do not mount host sensitive directories on containers especially in read-write mode.Impact-None.Default Value-Docker defaults to a read-write...

Details http://blog.docker.com/2014/06/why-you-dont-need-to-run-sshd-in-docker/ Solution Uninstall SSH server from the container and use nsenter or any other commands such asdocker exec or...

Details https://github.com/docker/docker/issues/13490 2.http://12factor.net/config 3.https://avicoder.me/2016/07/22/Twitter-Vine-Source-code-dump/ NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target...

Details Docker considers a private registry either secure or insecure. By default, registries are considered secure.A secure registry uses TLS....

Details https://docs.docker.com/reference/commandline/cli Solution Do not run container with the –privileged flag.For example, do not start a container as below-docker run...

Details Do not use ‘aufs’ as storage driver for your Docker instance.The ‘aufs’ storage driver is the oldest storage driver....