From the course: Microservices: Security

Unlock the full course today

Join today to access over 24,900 courses taught by industry experts.

Audit container security

Audit container security

From the course: Microservices: Security

Start my 1-month free trial Buy for my team

Audit container security

“

- [Instructor] When assessing the security posture of any component within a system, it's best to rely upon a tool to check for vulnerabilities and the enforcement of best practices. When it comes to running Docker containers, Docker Bench is one of the best tools for the job. Docker Bench is a small script that inspects the container host to show how it complies with the Center for Internet Securities Docker Benchmark. This is a formal list of security best practices for Docker. Now let's get hands-on and I'll show you how Docker bench works. So here in Windows subsystem for Linux, I've installed Docker on Abuntu. And then within Docker I have a single container running our microservice. Now let's analyze the security posture of the host and the container with Docker bench. The first thing that we'll do is clone the Docker bench repository so that we can get a copy of the script on our host. Alright, after the repository is cloned, we can go ahead and change directory into the…

Contents