container-security
Resources for the O'Reilly Container Security book
Breaking Container Isolation
References
- p. 147 — Nginx (Docker Official Image)
- p. 148 — Nginx: User and group ID
- p. 149 — Kubernetes: Sysctls in a cluster
- p. 149 — Nginx (unprivileged image)
- p. 149 — Dockerfile for nginx as an unprivileged user
- p. 149 - Bitnami
- p. 149 — Chainguard
- p. 149 — Distroless
- p. 150 = What does eBPF stand for?
- p. 150 — unleashing the kernel with eBPF
- p. 150 — eBPF Documentary
- p. 150 — eBPF.io
- p. 150 — Brendan Gregg
- p. 150 — Learning eBPF (O’Reilly)
- p. 151 — Rootless Containers
- p. 152 — [Kubelet in user namespace(https://kubernetes.io/docs/tasks/administer-cluster/kubelet-in-userns/)
- p. 152 — Kubernetes: Security context
- p. 152 - Root inside and outside a podman container
- p. 152 - User namespaces man page
- p. 152 - The shortcomings of rootless containers
- p. 153 - The most dangerous flag in the history of computing
- p. 154 - Capabilities granted by runc
- p. 155 - Privileged containers aren’t containers
- p. 155 - Using Docker-in-Docker? Think twice
- p. 156 - Kubernetes pod escape using log mounts
- p. 157 - Recursing read-only mounts
- p. 157 - Recursive mounts on Docker
- p. 159 - Prometheus sidecar
- p. 159 - OpenTelemetry sidecar
- p. 159 - AWS Fargate security with sidecars