From the course: DevOps Foundations: Containers

Unlock the full course today

Join today to access over 24,900 courses taught by industry experts.

Securing containers

Securing containers

- [Instructor] Using containers in prod means that we need to take security much more seriously. There are a few security risks that can come up when moving containers to prod. One of the biggest ones is shipping vulnerable dependency packages inside a container. We've already covered this briefly, but in this lesson, we'll talk about some strategies for mitigating that risk. Container engines usually need root level access to a system which opens up risks related to how the containers are implemented. And there's also the possibility of vulnerabilities in the container engine itself. Poor access controls for orchestration tooling is one of the biggest and most easily overlooked risks of containerization. There are a couple of simple strategies to mitigate the risk of vulnerable packages inside your containers. The reason containers are prone to this risk is because they tend to hide implementation details. But it doesn't…

Contents