Questions tagged [docker-container-trust]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
2 answers
825 views

Does a docker socket proxy improve security?

It's dangerous to expose the docker socket to a container, as malicious code could break out into the host. There are various ways to avoid this; a simple/popular approach is to use a proxy between ...
lonix's user avatar
  • 445
3 votes
2 answers
676 views

Security of untrusted Docker containers

If I want to run untrusted code inside a Docker container, or an untrusted Docker container for that matter, how can I restrict it? I'd like to make sure it has no access to the host filesystem. ...
SRobertJames's user avatar
0 votes
0 answers
141 views

Docker: How to download & verify a publisher's root key (out-of-band, distinct-domain cryptographic verification, WoT)

For a given publisher of docker images on Docker Hub (let's say debian), how do I download their root release/image signing key and verify its authenticity from multiple sources out-of-band from each-...
Michael Altfield's user avatar
2 votes
3 answers
264 views

How can I pass secrets to a compromised container without the attacker being able to see them?

The most common method of passing secrets to a docker container is through ENVs. The problem is: Imagine that your docker container is hosting a HTTP server that can have a security exploit (like any ...
PedroD's user avatar
  • 121
3 votes
3 answers
650 views

Securing docker containers on private LAN

I am using docker to run a few server apps on a raspberryPi with ports exposed to the open internet. If an attacker were to successfully infiltrate my docker containers, I would like to be certain ...
caps's user avatar
  • 131
0 votes
1 answer
222 views

How to pin public root key when downloading an image with docker pull (Docker Content Trust)?

How can I execute docker pull (with Docker Content Trust enabled) such that it fails if the image doesn't have a valid signature using the private key corresponding to (or subordinate to) the public ...
Michael Altfield's user avatar
3 votes
1 answer
360 views

How to list all of the known root keys in docker (Docker Content Trust)

How can I list all of the Docker Content Trust root keys on my system? I am setting up a CI process that will use the debian:stable-latest docker image to build my application's releases in ephemeral ...
Michael Altfield's user avatar