Dockerfile Security Best Practices

Re:Dockerfile Security Best Practices by cpuguy83 on Thursday October 15, 2020 @05:14PM (#24794072)

I like this idea. I believe we already have a mechanism for warning on container create.

The nice thing is admins can already define a default value that the eninge will use to bind to (when no address is specified on -p). Warning can point users to that setting.

[ Parent | on HN ]

Re:Dockerfile Security Best Practices by cpuguy83 on Thursday October 15, 2020 @05:15PM (#24794081)

I do worry a bit about noise, though.

[ Parent | on HN ]

Re:Dockerfile Security Best Practices by Godel_unicode on Thursday October 15, 2020 @09:10PM (#24796334)

Perhaps make it easily quieted in the settings, and some kind of backoff between warnings? I definitely agree that it could be too much, on busy development systems especially!

[ Parent | on HN ]