Filipp Frizzy 2020-09-15 14:52:54 +03:00 committed by GitHub
parent 4084b3b3f1
commit 2c2e701e41
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -232,6 +232,8 @@ Web panel for LXC on Ubuntu.
Basic docker monitoring web application. Basic docker monitoring web application.
* [portainer](https://github.com/portainer/portainer) * [portainer](https://github.com/portainer/portainer)
Lightweight Docker management UI. Lightweight Docker management UI.
* (swarmpit)[https://github.com/swarmpit/swarmpit]
Lightweight mobile-friendly Docker Swarm management UI.
## Best practices ## Best practices
@ -264,8 +266,8 @@ A proxy for docker.sock that enforces access control and isolated privileges.
gVisor is a user-space kernel, written in Go, that implements a substantial portion of the Linux system surface. It includes an Open Container Initiative (OCI) runtime called runsc that provides an isolation boundary between the application and the host kernel. The runsc runtime integrates with Docker and Kubernetes, making it simple to run sandboxed containers. gVisor is a user-space kernel, written in Go, that implements a substantial portion of the Linux system surface. It includes an Open Container Initiative (OCI) runtime called runsc that provides an isolation boundary between the application and the host kernel. The runsc runtime integrates with Docker and Kubernetes, making it simple to run sandboxed containers.
* [docker-explorer](https://github.com/google/docker-explorer/) * [docker-explorer](https://github.com/google/docker-explorer/)
A tool to help forensicate offline docker acquisitions. A tool to help forensicate offline docker acquisitions.
* (oci-seccomp-bpf-hook)[https://github.com/containers/oci-seccomp-bpf-hook]
OCI hook to trace syscalls and generate a seccomp profile.
### Links ### Links
* [CIS Security Benchmarks](https://benchmarks.cisecurity.org/about/) * [CIS Security Benchmarks](https://benchmarks.cisecurity.org/about/)