Sneaking Around Docker and Kubernetes Isolation

Conclusion

I have covered three plausible container escapes that should give you some food for thought. Hopefully, you have learned some things about securing your containers and Kubernetes clusters.

These days it is simply not enough to follow the installation of software with a cut-and-paste approach. Employing good security practices means that your containers will be running for much longer without outages, and you'll limit the chances of someone stealing or tampering with your application code.

Infos

  1. CVE-2024-21626:https://nvd.nist.gov/vuln/detail/CVE-2024-21626
  2. CVSS: https://www.first.org/cvss
  3. Install k3s – the mini Kubernetes distribution: https://k3s.io
  4. GitLab documentation: https://docs.gitlab.com/runner/executors/docker

The Author

Chris Binnie is a cloud native security consultant [https://www.chrisbinnie.co.uk] who has worked with critical online infrastructure for almost three decades. Edinburgh-based, he has written three cybersecurity books and written extensively for Linux.com.

« Previous 1 2

Buy this article as PDF

Download Article PDF now with Express Checkout
Price $2.95
(incl. VAT)

Buy Linux Magazine

SINGLE ISSUES
Print Issues
Digital Issues
SUBSCRIPTIONS
Print Subscriptions
Digital Subscriptions

Related content

  • Docker Open Source Developer Tools

    Docker provides the open source tools and resources for compiling, building, and testing containerized applications.

    more »
  • Container Security

    A recent flurry of activity in the container space raises several interesting questions about security among a number of operational aspects in the enterprise environment.

    more »
  • Docker and Kubernetes

    At this year's DockerCon Europe, Docker announced that it is officially supporting the Google-sponsored Kubernetes ochestration engine – an unexpected development that surprised many observers.

    more »
  • Docker

    Docker is an economical alternative to conventional virtualization. Because each Docker container shares the underlying operating system, it enjoys the resource isolation and allocation benefits of VMs but is much more portable and efficient.

    more »
  • Docker and Kubernetes

    After you jump onto the container bandwagon, you will find yourself looking for high-performance solutions for managing the Docker landscape. Several vendors offer special operating system images with built-in container management tools. Red Hat uses Atomic with Google's Kubernetes management tool.

    more »
comments powered by Disqus