Questions tagged [docker]
Docker is a popular virtualization solution that provides virtualization within an operating system for reusable packages of software called containers. More information available at docker.com.
147
questions
0
votes
2answers
33 views
Remediating base image vulnerabilities
I'm trying to build a base image that pulls from php:7.3-fpm, which is built on debian:buster-slim. The php:7.3-fpm base image has vulnerabilities out of the box, like https://security-tracker.debian....
1
vote
1answer
48 views
Do I need to keep production Docker/container images?
Context
My company is developing a SaaS solution that needs to conform to PCI-DSS L1 for sure, and possibly FedRAMP and other frameworks later.
We can do continuous deployment with feature flagged/...
0
votes
2answers
84 views
How to secure containerized python source code deployed at client side cloud
How can we secure a source code which is deployed at client side cloud and is difficult to reverse engineer just like a licensed product The major difference is that I have a service to protect and do ...
1
vote
0answers
53 views
How to interpret received packets, although not being destination host
Set up:
Victim: 192.168.0.2
Attacker (also having SSH server installed): 192.168.0.3
SSH server: 192.168.0.4
I perform a successful ARP Spoofing attack (being obviously the attacker's MAC address):
...
1
vote
1answer
86 views
Is docker for desktop secure for non-admins?
I manage a multi-user workstation (Windows) server for a small student organisation. One of the students asked me to install docker, as it would simplify his workflow. As this is on a shared ...
3
votes
0answers
70 views
What are these requests that appear to be phoning home?
I have a .NET 5 application running on AWS which has these requests constantly attempting to run:
GET http://app-10-irules.com/
GET http://www.simpleexample.com/
GET http://ssl-app-default-backend.com/...
1
vote
1answer
85 views
file-integrity monitoring tools for PCI compliance
A former employer of mine has reached out to me to assist them with PCI certification (I guess I'll be getting a 1099-NEC from them next year as a result). Here's the point I'm at in the questionnaire:...
2
votes
1answer
90 views
Securing docker containers on private LAN
I am using docker to run a few server apps on a raspberryPi with ports exposed to the open internet. If an attacker were to successfully infiltrate my docker containers, I would like to be certain ...
2
votes
1answer
85 views
Docker container exposed port vulnerabilities on Debian server?
I'm configuring a Debian (Stretch) webserver to run docker containers for socks requests. So, the application would be able to authenticate (on port 1080) with the Dante server running inside the ...
2
votes
1answer
75 views
Container Vulnerability Management
Having difficulty understanding how to translate 'traditional' vulnerability management to a cloud environment. Previously accustomed to using tools like OpenVAS and Nessus, setting up scans which ...
2
votes
2answers
150 views
How are docker containers affected by CVE-2021-3156?
Do docker (web service/server)s run unattended updates? Otherwise, how to do this? I am worried about the recent sudo -s CVE. How are docker containers affected? If I set up an auditing system with ...
0
votes
2answers
75 views
Which attacks are prevented by switching the user within the docker container, given a read-only root fs?
There are recommendations to run processes as a non-privileged user within the docker container:
[...] run your processes as non-privileged users inside the container
See: docs.docker.com, also 1, 2
...
0
votes
1answer
90 views
How to start pentesting/reverse engineering/cracking a software on Linux? (Docker based) [closed]
TL:DR; What are good learning resources for security testing a software which runs with Docker on Ubuntu.
I am in junior position at this company, and they figured it would be good if I just test ...
11
votes
2answers
3k views
Security implications of granting non-root access to privileged ports (<1024)
Lots of solutions to this problem e.g. here and here but in order to decide which is best I'd need to know more about the security implications of each solution (or at least in general).
My context: I'...
2
votes
1answer
74 views
Is HTTPS meaningful for Jenkins Docker container behind Nginx?
I have a Docker Compose setup that starts up Nexus, Jenkins and Nginx containers. All calls to Jenkins and Nexus must pass through Nginx. I accomplish this by only port forwarding the Nginx container....
1
vote
0answers
71 views
Is there any value in using macvlan/VLANs to create router aware networks to segment internet exposed containers vs non exposed containers?
I have a single home server with a single NIC. I intend to run numerous Docker containers -- some will be internet exposed, some will not.
The way I see it, I have two options:
Use the normal bridge ...
4
votes
1answer
184 views
Privilege escalation writing /etc/passwd but without SUID permission on su
This is not an exercise, there might be no solution.
We are producing a Docker image (based on CentOS) which is designed to be executed by a non-root user.
However, this user has write access to /etc/...
1
vote
0answers
212 views
How docker is translating docker0 interface ip address to host ip address
I'm trying to create a lab environment to experiment with MiTM attacks. I want to learn docker also so I've decided to do this with docker. I created 2 images (attacker, victim):
Victim - based on ...
0
votes
0answers
29 views
Running non-root process in docker vs bare metal
Recently I faced argument that threw me a bit off balance. I've been suggested that running application bare metal is actually more secure than running it in container.
Reasoning behind that is that ...
1
vote
1answer
105 views
Is Docker Desktop safe to use on a unsecured network?
I use Docker Desktop for Windows. I noticed it adds to my OS's host file <ip> host.docker.internal, where <ip> is the private machine IP for the connected local network. (This DNS name is ...
0
votes
0answers
97 views
securely using Nextcloud on raspberry pi
I like data privacy, so I would like to set up a system that allows me to exchange data such as photos with family and friends. I have a raspberry pi (version 4 I think? the one that was new in the ...
0
votes
1answer
81 views
Managing vulnerabilities in continuous delivery
When building my own Docker container, if I use a base image such as Debian 10.6 (stable) there are times when high vulnerabilities are found in the OS packages, that have not been fixed in this ...
0
votes
1answer
394 views
Is it a good idea to host a SFTP server within a dockerized environment with mounted host directories?
For platform hardware independence, a proposal to host a SFTP server within a containerized environment was being considered.
A container or pod would have the server running within it, with mounted ...
0
votes
0answers
29 views
How to pin public root key when downloading an image with docker pull (Docker Content Trust)?
How can I execute docker pull (with Docker Content Trust enabled) such that it fails if the image doesn't have a valid signature using the private key corresponding to (or subordinate to) the public ...
2
votes
1answer
110 views
How to list all of the known root keys in docker (Docker Content Trust)
How can I list all of the Docker Content Trust root keys on my system?
I am setting up a CI process that will use the debian:stable-latest docker image to build my application's releases in ephemeral ...
0
votes
2answers
660 views
Docker: Not able to read local file system
I am inside the container, and I am trying to learn escaping from container to host. So I create a vulnerable environment, on which the container is having `/var/run/docker.sock' file inside the ...
3
votes
1answer
259 views
Is it possible to run commands that exist only on the host on a docker container?
We would like to harden our Docker Image and remove redundant software from it. Our Devs and Ops asked to keep some Linux tools used for debugging on the containers running on our Kubernetes Prod ...
1
vote
1answer
2k views
Mongo DB hacked (read_me_to_recover) without the port exposed in the firewall?
I have recently set up parse-server on a DO VPS using 3 docker containers; one for parse-server, one for parse-server dashboard and one for mongodb. Because I am just testing this setup I left the ...
1
vote
1answer
75 views
Host filesystem manipulation from docker vs. virtual machine
When reading about docker, I found a part of the documentation describing the attack surface of the docker daemon. From what I was able to understand, part of the argument is that it is possible to ...
1
vote
1answer
29 views
Security loopholes while mapping .kube/config file on to docker as volume
I have a scenario where I have to install Kubernetes on a public cloud and access the Kubernetes via kubectl from a VM on my laptop.
Kubectl accesses .kube/config to connect K8S API-Server to do the ...
0
votes
1answer
241 views
Can malicious applications running inside a docker container still be harmful? [duplicate]
I am very new to docker (and don't usually program at a 'systems' level). I will be working on an open source project with complete strangers over the web over the next couple of months. I trust them, ...
0
votes
1answer
132 views
Do docker images have the same root password?
If two persons are pulling the same docker image (let's say Debian:10.4), they will obtain the same "files" (layers) from the docker repo.
So, from what I understand, launching a docker ...
0
votes
1answer
578 views
Where to find complete Kali image for docker with all the tools? [closed]
As of now, I am using window 10 & I want to run kali Linux on Docker. For that, I took the copy from kali official site Here
But after running I found it's just a base OS it doesn't contain all ...
1
vote
1answer
73 views
How do I share secret key files with Docker containers following 12 Factor App?
I am building an API and trying to follow the 12 Factor App methodology. Using Docker, the methodology says containers must be disposable.
Assuming the API will have high traffic, multiple docker ...
2
votes
1answer
223 views
Podman: What if user is member of docker group?
From a security perspective: Is it necessary that a user, that runs OCI containers with Podman, is not at the same time a member of the docker group?
From what I understand the idea behind Podman is ...
3
votes
1answer
109 views
Run docker as not sudoers
I have on my ubuntu instance a group of non-sudoers ("deploy" group). In order, to enable them to use docker I have to change the permission of "/var/run/docker.sock" file to chgrp deploy /var/run/...
2
votes
1answer
427 views
Buffer Overflow Works Locally But Not Remotely
So I made a simple buffer overflow challenge and attempted to host it on a digitalocean droplet. The challenge source is below, and is compiled using gcc welcome.c -fno-stack-protector -no-pie -o ...
1
vote
0answers
511 views
Digital Ocean ENV Variables - .env file, ENV Variables, or something else
Does Digital Ocean have something similar to Credstash or AWS Secrets Manager (both AWS services)?
Trying to decide on the most secure way to store environmental variables with sensitive information (...
1
vote
1answer
66 views
Does Google Cloud Run (or AWS Lambda) rely on container isolation or KVM?
I was wondering if it is secure or not to run containers from different customers on the same machine. Basically I was investigating the level of isolation / security provided by Docker alone.
Then ...
3
votes
1answer
273 views
Secure Communication between Swarm Worker Nodes
I have a Swarm Cluster and want to communicate securely between Windows Worker Nodes. The official Docker Documentation (https://docs.docker.com/engine/swarm/how-swarm-mode-works/pki/) states:
The ...
6
votes
1answer
1k views
I'm seeing strange names in my list of docker containers, is someone having fun at docker or is that from hackers?
I'm trying to run a docker and it fails for various reasons. As I check my list of dockers (docker ps -a), I see those names:
pedantic_gauss
recursing_feynman
adoring_brattain
suspicious_tesla
...
1
vote
0answers
120 views
How should I install Kali Linux on my Windows 10?
I'm using Windows 10. I found several ways to install Kali Linux on Win10:
Install it on VMWare
Install it on Docker
Install it on Linux subsystem (WSL)
I might need to access some files in my ...
3
votes
1answer
1k views
Is accessing /proc/ inside docker container a security breach?
In a docker container I am reading the files /proc/stat and /proc/meminfo. As I understand they are the ones of the host. (Not local to the docker container)
In a meeting, a co-worker said that this ...
1
vote
1answer
125 views
Risk of Docker backdoor allowing impersonation
I am a junior web developer. All I know is mostly about web development. I have no skills and knowledge about system security and know little about Linux.
I work in a company which is developing some ...
2
votes
1answer
96 views
Does Docker affect the quality of cryptographic operations?
Is running cryptographic operations (encryption / decryption / signing / verifying / key-exchange / key-generation) in a Docker container affecting the quality of the crypto or entropy?
If it does ...
2
votes
2answers
164 views
How do you handle vulnerabilities in internal systems?
A constant source of debate I've seen between engineers and security teams is how to handle vulnerabilities in internal systems. Specifically, vulnerabilities in linux packages (like gcc, libcurl, ...
10
votes
3answers
2k views
Can network traffic between Docker containers be sniffed?
On normal networks, it is a security risk to send plaintext data, since attackers can sniff or even manipulate all traffic. Encryption is required for secure communication. When using Docker ...
1
vote
0answers
157 views
Is it safe to run a Kubernetes container as a root user? [closed]
I run my Spring Boot (Java) application in the Kubernetes environment as a root user and with JMX authentication turned on.
My k8s containers are being flagged as a security risk by the security ...
0
votes
0answers
68 views
Exploitation differences between Docker and VirtualBox for CVE-2010-4221
I am currently working on a research project where I analyze exploits in different virtualized environments. As an example I picked ProFTPd v1.3.3c which has a remote code execution vulnerability.
I ...
3
votes
1answer
663 views
Secure elasticsearch in Docker [closed]
How can I secure elasticsearch for production use in Docker?
I use this docker-compose.yml:
version: '2'
services:
elasticsearch:
image: docker.elastic.co/elasticsearch/elasticsearch:5.6.16
...
