Don’t use Docker run –net=host – Don’t use spec.hostNetwork

TL; DR: Running containers in the host network namespace is insecure. Don’t run Docker containers with docker run –net=host . Don’t run… Read more

Similar

The Quest for Minimal Docker Images, Part 1

When getting started with containers, it’s pretty easy to be shocked by the size of the images that we build. We’re going to review a number of techniques to reduce image size, without sacrificing developers’ and ops’ convenience. In this first part, we w... (more…)

Read more »