What are the added security risks of using a dockerized container to deploy a production server?
Not interested in risks that would exist anyway in deploying a production server the traditional way,but only to risks potentially added from the use of a dockerized deployment. Note the user active within the container is different than root and is one that doesnt have rights to install anything or make changes outside their given working directory. Assume that our image is build directly from an official OS image, and all other software installed is hash checked and that we will only install on it the bare minimum needed to run our web app.
Also, what are some good practices that should be followed when setting up such a server through Docker to ensure maximum security?