Filipp Frizzy 2017-12-10 19:48:43 +00:00 committed by GitHub
parent 4d545f3ad3
commit 62f825fb8b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 0 deletions

View File

@ -208,6 +208,8 @@ Drydock provides a flexible way of assessing the security of your Docker daemon
Security by segmentation for Docker and Kubernetes.
* [goss](https://github.com/aelsabbahy/goss)
Quick and Easy server testing/validation.
* [sockguard](https://github.com/buildkite/sockguard)
A proxy for docker.sock that enforces access control and isolated privileges.
### Links
@ -229,6 +231,7 @@ Quick and Easy server testing/validation.
- [Architecting Containers Part 2: Why the User Space Matters](http://rhelblog.redhat.com/2015/09/17/architecting-containers-part-2-why-the-user-space-matters-2/)
- [Secure Your Containers with this One Weird Trick](http://rhelblog.redhat.com/2016/10/17/secure-your-containers-with-this-one-weird-trick/)
* [Why you shouldn't use ENV variables for secret data](https://diogomonica.com/2017/03/27/why-you-shouldnt-use-env-variables-for-secret-data/)
* [When to use-Docker alternatives rkt and LXD](http://searchitoperations.techtarget.com/tip/When-to-use-Docker-alternatives-rkt-and-LXD)
### Levels of security problems