Questions tagged [docker-container-trust]
The docker-container-trust tag has no usage guidance.
7
questions
2
votes
2
answers
123
views
Security of untrusted Docker containers
If I want to run untrusted code inside a Docker container, or an untrusted Docker container for that matter, how can I restrict it?
I'd like to make sure it has no access to the host filesystem. ...
- 245
0
votes
0
answers
81
views
Docker: How to download & verify a publisher's root key (out-of-band, distinct-domain cryptographic verification, WoT)
For a given publisher of docker images on Docker Hub (let's say debian), how do I download their root release/image signing key and verify its authenticity from multiple sources out-of-band from each-...
- 816
0
votes
0
answers
84
views
SECCOMP inside a docker container adds an extra layer of security?
Does hardening with SECCOMP a binary running inside a Docker container brings extra security? I can find many articles/papers about hardening the container itself but very few things about hardening ...
2
votes
3
answers
148
views
How can I pass secrets to a compromised container without the attacker being able to see them?
The most common method of passing secrets to a docker container is through ENVs.
The problem is:
Imagine that your docker container is hosting a HTTP server that can have a security exploit (like any ...
- 121
2
votes
1
answer
256
views
Securing docker containers on private LAN
I am using docker to run a few server apps on a raspberryPi with ports exposed to the open internet. If an attacker were to successfully infiltrate my docker containers, I would like to be certain ...
- 121
0
votes
1
answer
102
views
How to pin public root key when downloading an image with docker pull (Docker Content Trust)?
How can I execute docker pull (with Docker Content Trust enabled) such that it fails if the image doesn't have a valid signature using the private key corresponding to (or subordinate to) the public ...
- 816
3
votes
1
answer
243
views
How to list all of the known root keys in docker (Docker Content Trust)
How can I list all of the Docker Content Trust root keys on my system?
I am setting up a CI process that will use the debian:stable-latest docker image to build my application's releases in ephemeral ...
- 816