Skip to main content
grasp.study
About
Explore
Pricing
Log in
Try it for free
Back to course
👋
Welcome to a Grasp lesson
Create a free account
to keep studying and create your own study path.
Docker
·
Module 5
Container Security Hardening
1
Scanning Docker Images for Vulnerabilities
Scan Docker images for known vulnerabilities using tools like 'docker scan' or Trivy.
2
Linux Capabilities: Least Privilege in Practice
Apply the principle of least privilege by managing Linux capabilities (add/drop).
3
Secure Containers with --no-new-privileges
Prevent privilege escalation within containers using the '--no-new-privileges' flag.
4
AppArmor/SELinux for Container Isolation
Enhance container isolation by applying existing AppArmor or SELinux profiles.
5
Immutable Containers for Enhanced Security
Run containers with a read-only root filesystem to prevent runtime modifications.
6
Docker Secrets vs. Environment Variables
Differentiate between Docker secrets and environment variables for managing sensitive data.
7
Docker Socket Security Risks
Analyze the security implications of mounting the Docker socket in a container.
Previous module
Multi-Service Applications with Docker Compose
Next module
Container Observability: Logging and Monitoring