container-security
Resources for the O'Reilly Container Security book
Strengthening Container Isolation
References
- p. 133 — Seccomp security profiles for Docker
- p. 133 — How to use the new Docker Seccomp profiles
- p. 133 — Security Profiles Operator
- p. 134 — Liz Rice talk on implementing strace in Go
- p. 134 — AppArmor project
- p. 135 — Restrict a container’s access with AppArmor
- p. 135 — Security-Enhanced Linux
- p. 136 — An Introduction to SELinux on CentOS 7 – Part 1 (Basic Concepts)
- p. 136 - Your Visual Guide for SELinux Policy Enforcement
- p. 136 — Dirty COW (CVE-2016-5195)
- p. 137 — gVisor
- p. 138 — gVisor: Compatibility Guide
- p. 138 — gVisor: Performance Guide
- p. 138 — gVisor: Architecture Guide — Security
- p. 139 — gVisor: Platforms — KVM
- p. 139 — Kata Containers
- p. 139 — Firecracker
- p. 139 — Cloud Hypervisor
- p. 140 — Edera docs: Architecture overview
- p. 140 — Apple containerization
- p. 140 — Security without sacrifice — Edera performance benchmarking
- p. 141 — Nabla containers