How to use Docker Bench for Security to audit your container deployments

One of the biggest issues surrounding container deployments is security. This is such an issue because there are so many moving parts to be checked. You might have your container manifests perfectly secure, but what about your host? Or maybe your host is sound, but your YAML files are riddled with security holes.

What do you do? Spend hours (or days) combing through everything to ensure those deployments are secure? You could do that. Or you could make use of the tools available to you. One such tool is a pre-built container, called Docker Bench for Security--it does a great job of auditing your container host and the currently running deployments. Unlike many such tools, Docker Bench for Security is incredibly easy to use.  

Docker Bench for Security audits the following:

    General configuration

    Linux HostAs Specific configuration

    Docker daemon configuration

    Docker daemon configuration files

    Container images and Build File

    Container Runtime

    Docker Security Operations

    Docker Swarm Configuration

    Docker Enterprise Configuration

    Docker Trusted Registry Configuration