docker
9 posts found
Why Read-Only Containers Do Not Stop Binary Execution
A read-only root filesystem prevents disk writes, but Linux kernels still permit staging and executing in-memory ELF binaries via memfd_create and unhardened tm…
Hadolint vs Docker DX: Dockerfile Security Linting Compared
Compare Hadolint and Docker DX for Dockerfile security linting across rule depth, developer workflow, CI/CD integration, and custom policy enforcement.
Secret Leakage Risks When LLMs Execute Shell Commands
A practical 10-step hardening checklist for securing LLM-driven shell execution: runtime container isolation, credential purging, network exfiltration preventio…
Why Docker Bypasses UFW Rules (And How to Fix It)
Docker manipulates iptables FORWARD chains directly, bypassing UFW INPUT rules. Learn why container ports leak to the public internet and how to secure them.
Lazydocker vs Dockge: TUI vs Web Dashboard for Docker Compose Management
A comparative analysis of Lazydocker and Dockge for managing Docker Compose stacks, focusing on security boundaries, resource usage, and workflow efficiency.
Mapping AI Agent Skills to MITRE ATT&CK Frameworks
An interview on structuring autonomous AI agent skills with MITRE ATT&CK and NIST CSF for safer automated defensive operations.
Invidious: Private YouTube, Self-Hosted
Escape YouTube's surveillance. Invidious offers a self-hosted, open-source alternative for private video consumption, stripping tracking and ads.
Building a Containerized Reconnaissance Lab
Learn how to build a secure, ephemeral OSINT lab using Docker. We deploy WebCheck and Huntkit with strict network isolation and VPN routing for private reconnai…
The Self-Hosted Docker Security Checklist
A comprehensive checklist for hardening your self-hosted Docker deployments against modern threats.