search

aerabi / hackdockerfest

Docker best practices created by the community
4 stars 4 forks source link

Update Security.md with new topics, examples & description #59

Closed amit712singhal closed 1 month ago

amit712singhal commented 1 month ago

As per the assignment for issue #1, I have added the following topics to the 2021/Security.md file to enhance Docker security best practices:

  1. Restrict Container Capabilities: Use --cap-drop and --cap-add to minimize container privileges.
  2. Use Read-Only Filesystem: Enforce a read-only filesystem with the --read-only flag to prevent unauthorized modifications.
  3. Limit Resource Consumption: Set CPU and memory limits to avoid excessive resource usage by containers.
  4. Network Security: Isolate containers using user-defined networks for improved network segmentation.
  5. Keep Docker Updated: Regularly update Docker to the latest version to ensure access to security patches and features.

These additions aim to strengthen the existing security recommendations.