Docker Security: Start your Container Journey Safely

on YouTube ↗43m

" summary

Shows an exposed Docker daemon (open Docker API on 2376) that allows container escape to the host and demonstrates pulling credentials from ~/.docker/config.json (credentials stored base64), then explains fixes: mutual TLS or an auth plugin (HBM), docker credential helpers, and pulling by image digest not tag. Covers concrete hardening: multistage builds and removing apt cache to shrink images, run containers as non‑root, drop capabilities, use seccomp/AppArmor, set CPU/disk limits, and recommends minimal container OSes (RancherOS/LinuxKit/CoreOS).

AI-written summary · about

" chapters (7)

1. 0:00Start
2. 2:26(bad) habits
3. 3:40Security Topics
4. 6:19Anatomy of a container
5. 7:54Docker hosts
6. 20:19Docker images
7. 32:08Run your images

" related talks

• 50mInsights in Container SecurityNils Magnus · GOTO Berlin 2015
• 34mHow secure are Docker containers?Ben Hall · Full Stack Fest 2016
• 33mContainers Security Layers and How Not to Break themAviv Sasson · ContainerCon @ Open Source Summit North America 2022
• 14mDocker SecurityNils Magnus · OSCON Amsterdam 2015
• 35mDocker SecurityAdrian Mouat · GOTO Stockholm 2016
• 47mDocker 201 SecurityDirk Wetter · OWASP AppSec Europe 2018
• 34mHow to Contain Security in your ContainersAdrian Gonzalez · Conf42 DevSecOps 2022
• 52mA Wander Through the World of Container SecurityAnais Urlichs · OWASP 2022 Global AppSec Europe Virtual Event