New answers tagged

2

If you give an application access to your Kubeconfig file you're giving it effectively your rights to every cluster defined in that file. Kubeconfig files contain credentials for one or more clusters generally either as client certificates or as JWT tokens. An application with access to that file can then access those clusters. If the application running in ...


2

With Linux containers, the container shares the same kernel as the host. So any vulnerabilities in the host's kernel could be used to escape from the container as root. However, if you keep your system up to date, this is unlikely to be of concern. The main things to be careful with Docker are: Mounting filesystems in the container: If you map something ...


0

First you need to check. Im not an expert in container Security but I understand that there can be a certain communication between the container and the host machine. Everything inside the container you can be darn well that is over. Now you need to check some things. When building your container never execute it or build with privileges or flags that can ...


1

A secret used by a container is typically some type of credential needed by the contained process to authenticate to another service (e.g. an API key or credentials for a database). If the container is compromised an attacker will have access to anything the contained process had access to ,which is necessarily going to include that secret. So the answer to ...


2

Salt the secret using your own technique, taking inputs from the docker metadata, the environment, arguments or environment variables, etc. then use md5 and docker inspect to gather the info needed to salt it locally, save it as a salted secret locally, on the container only someone knowing the unsalt technique would be able to compromise it, in theory only ...


2

Docker containers don't usually let you log in as root with any password. Usually, the only way to get in is to docker exec from the host. There is no hash to find a preimage of.


3

Use Kali Linux Metapackages after setting up a Kali Linux Docker Image. In 2019.3 there was a Major Metapackage Makeover, changing the names. To combine this information: apt-get update && apt-get install kali-linux-large Previously, kali-linux-full was the default metapackage, which has been renamed to kali-linux-large with a redirect put in place. ...


1

12 factor says that the config needs to be stored in the environment. So why not simply pass the secrets to the container over environment variables? If there are many, pass a master key to a key store that is lying on a volume mounted at start.


Top 50 recent answers are included