Securing your containers

So far, we have quite happily been pulling images from the Docker Hub without much thought as to who created them or what is actually installed. This hasn't been too much of a worry as we have been creating ad-hoc environments to launch the containers in.

As we move towards production and resolving the worked in dev problem, it starts to become important to know what it is that you are installing.

Throughout the previous chapters, we have been using the following container images:

• WordPress: https://hub.docker.com/_/wordpress/

• MySQL: https://hub.docker.com/_/mysql/

• MariaDB: https://hub.docker.com/_/mariadb/

All three of these images are classified as official images and have not only been built to a documented standard, they are also peer reviewed at each pull request.

There are then the three images from my own Docker Hub account:

• Consul: https://hub.docker.com/r/russmckendrick/consul/

• NGINX: https://hub.docker.com/r/russmckendrick/nginx/

• Cluster Example: https://hub...