Sneaking Around Docker and Kubernetes Isolation

Conclusion

I have covered three plausible container escapes that should give you some food for thought. Hopefully, you have learned some things about securing your containers and Kubernetes clusters.

These days it is simply not enough to follow the installation of software with a cut-and-paste approach. Employing good security practices means that your containers will be running for much longer without outages, and you'll limit the chances of someone stealing or tampering with your application code.

Infos

  1. CVE-2024-21626:https://nvd.nist.gov/vuln/detail/CVE-2024-21626
  2. CVSS: https://www.first.org/cvss
  3. Install k3s – the mini Kubernetes distribution: https://k3s.io
  4. GitLab documentation: https://docs.gitlab.com/runner/executors/docker

The Author

Chris Binnie is a cloud native security consultant [https://www.chrisbinnie.co.uk] who has worked with critical online infrastructure for almost three decades. Edinburgh-based, he has written three cybersecurity books and written extensively for Linux.com.

« Previous 1 2

Buy this article as PDF

Download Article PDF now with Express Checkout
Price $2.95
(incl. VAT)

Buy Linux Magazine

SINGLE ISSUES
Print Issues
Digital Issues
SUBSCRIPTIONS
Print Subscriptions
Digital Subscriptions

Related content

  • Docker Open Source Developer Tools

    Docker provides the open source tools and resources for compiling, building, and testing containerized applications.

    more »
  • Container Security

    A recent flurry of activity in the container space raises several interesting questions about security among a number of operational aspects in the enterprise environment.

    more »
  • Docker and Kubernetes

    At this year's DockerCon Europe, Docker announced that it is officially supporting the Google-sponsored Kubernetes ochestration engine – an unexpected development that surprised many observers.

    more »
  • Docker and Kubernetes

    After you jump onto the container bandwagon, you will find yourself looking for high-performance solutions for managing the Docker landscape. Several vendors offer special operating system images with built-in container management tools. Red Hat uses Atomic with Google's Kubernetes management tool.

    more »
  • Docker

    Docker is an economical alternative to conventional virtualization. Because each Docker container shares the underlying operating system, it enjoys the resource isolation and allocation benefits of VMs but is much more portable and efficient.

    more »
comments powered by Disqus
Subscribe to our Linux Newsletters
Find Linux and Open Source Jobs
Subscribe to our ADMIN Newsletters

Digital Autonomy

• How the Fediverse Found Parts for Its Platforms
• The Answer Was Already on the Shelf
• Changing the Chip Industry: How Public Investment Has Grown Open Silicon
• United Nations Open Source Portal Goes Live
• EU Open Source Strategy Plays Key Role in Tech Sovereignty Package
• France Says “Au Revoir” to Microsoft

Support Our Work

Linux Magazine content is made possible with support from readers like you. Please consider contributing when you’ve found an article to be beneficial.

Learn More

News

Tag Cloud

Administration Community Desktop Events Hardware Linux Mobile Programming Security Software Ubuntu Web Development Windows free software open source