Threat Actors Now Target Docker via Container Escape Features

Re:Threat Actors Now Target Docker via Container Escape Feat... by Jonnax on Saturday February 13, 2021 @05:41AM (#26122780)

Don't allow privileged containers to be created. It's in the name that it's a security risk.

With Kaniko being able to build docker images without the docker Daemon I'm not aware of other use cases for " docker in docker

What's peoples experience here?

[ Parent | on HN ]

Re:Threat Actors Now Target Docker via Container Escape Feat... by Caligatio on Saturday February 13, 2021 @09:20AM (#26123723)

kaniko is great but doesn't have feature parity with native docker build. Notably kaniko is missing everything related to BuildKit.

[ Parent | on HN ]

Re:Threat Actors Now Target Docker via Container Escape Feat... by meamin on Saturday February 13, 2021 @11:41AM (#26124591)

You can use standalone rootless buildkit building locally/natively and in cluster/container. You can use buildkit through docker too but docker is packing a runtime so standalone buildkit in cluster/container.

[ Parent | on HN ]

Re:Threat Actors Now Target Docker via Container Escape Feat... by snug on Saturday February 13, 2021 @06:32AM (#26122981)

DinD is useful for vulnerability/malware scanning

[ Parent | on HN ]