From the course: Container Security by InfoSec
Unlock this course with a free trial
Join today to access over 25,200 courses taught by industry experts.
Immutable containers
From the course: Container Security by InfoSec
Immutable containers
- [Presenter] All right, welcome back to the container security learning path. We are in the Docker security course of the learning path. We're in section 13, talking about running containers securely. And in this section 13, specifically, we're going to talk about immutable containers. So some quick definitions here. Mutable, right, prone to change, inconstant, capable of being changed, liable to mutation, right? Nice "Webster's Dictionary" definitions. And immutable, not capable, or susceptible to change, much like that giant boulder pictured on this slide. So one other thing to consider, right, as we talk about container workloads, right, using Docker containers to run applications is there's a DevOps sort of slogan or saying that you should treat servers like cattle, not pets. Servers should be sort of interchangeable units that you can swap out. You know, if you're a rancher, one cow is more or less as good as the other. There's obviously some... It's not 100% true, but generally…
Contents
-
-
-
-
(Locked)
Container image misconfigurations19m 42s
-
(Locked)
Running dockers and persisting data27m 21s
-
(Locked)
Dockerfile best practices35m 30s
-
(Locked)
Namespaces and Cgroups16m 3s
-
(Locked)
Seccomp and capabilities20m 5s
-
(Locked)
Docker networking14m 30s
-
(Locked)
Inside the container22m 30s
-
(Locked)
Outside the container23m 32s
-
(Locked)
Reproducible builds15m 38s
-
(Locked)
Public vs internal image repositories12m 26s
-
(Locked)
Hardening the build infrastructure13m 34s
-
(Locked)
Iron vs VM vs cloud providers19m 35s
-
(Locked)
Immutable containers17m 40s
-
(Locked)
Live scanning11m 23s
-
(Locked)
Baseline and anomaly detection16m 8s
-
(Locked)
-
-