August 2018
Intermediate to advanced
352 pages
12h 30m
English
This mode causes security risks as containers can get root-level access on the Docker host. With Docker 1.2 or newer, two new flags called --cap-add and --cap-del have been added to give fine-grained control inside a container. For example, to prevent any chown inside the container, use the following command:
$ docker container run --cap-drop=CHOWN [OPTIONS] IMAGE [COMMAND] [ARG...]
Refer to Chapter 9, Docker Security, for more details.
Read now
Unlock full access