Learning Docker - Second Edition

The security ramifications of Docker containers

The surging popularity of Docker technology is primarily due to the fact that Docker Inc., in collaboration with other interested parties, has introduced an open and industry-strength image format for efficiently packaging, distribution, and running of software applications. However, stuffing many applications into a system opens up definite worries and vulnerabilities:

• Exploiting host kernels: Containers share the same host kernel and this sharing may turn out to be a single point of failure for the containerization paradigm. A flaw in the host kernel could allow a process within a container to break out to bring down the host machine. Thus the domain of Docker security is about exploring ...