11. Docker Security
Overview
In this chapter, we will give you the information you need to make sure your containers are secure and do not pose a security risk to the people using the applications running on them. You will work with privileged and non-privileged containers and learn why you should not be running your containers under the root user. This chapter will help you verify whether images are from a trusted source, using a signing key. You will also set up a security scan for your Docker images, ensuring your images are safe for use and distribution. You will work with AppArmor to further secure your containers by using them and Security Computing Mode (seccomp
) for Linux to create and use seccomp
profiles with your Docker images.