Avoid image sprawl
Details Do not keep a large number of container images on the same host. Use only tagged images as appropriate....
- Home
- Security Hardening
- CIS Docker 1.13.0 V1.0.0 L1.Linux
CIS Docker 1.13.0 V1.0.0 L1.Linux
Create a separate partition for containers
Details All Docker containers and their data and metadata is stored under /var/lib/docker directory. By default, /var/lib/docker would be mounted...Harden the container host
Details Containers run on a Linux host. A container host can run one or more containers. It is of utmost...Keep Docker up to date
Details There are frequent releases for Docker software that address security vulnerabilities, product bugs and bring in new functionality. Keep...Only allow trusted users to control Docker daemon
Details The Docker daemon currently requires ‘root’privileges. A user added to the’docker’ group gives him full ‘root’access rights. Rationale: Docker...