Foundations Of Container Security
Get the free 30-day AI Mastery series 💌: https://insights.gradientlabs.co/
Work with me 💪: https://offerings.gradientlabs.co/ This video is for those of you not interested in reading an entire book on container security, but still want an intuitive understanding of the topic.
Today we’re going to walk through the topics that I found interesting in a great little book from Liz Rice called “Container Security: Fundamental Technology Concepts that Protect Containerized Applications”.
Checkout my digital dumping ground - https://www.dylandavis.net/
Skip to where you’re interested… :)
00:00 - Intro
01:17 - Agenda
03:33 - Container Ingredients - Intro
04:15 - Container Ingredients - Cgroups
08:03 - Container Ingredients - Namespaces
12:42 - Container Ingredients - Images
16:20 - Container Ingredients - Overview
18:42 - Containers vs. Virtual Machines - Intro
19:53 - Containers vs. Virtual Machines - Performance
21:33 - Containers vs. Virtual Machines - Security
24:42 - Containers vs. Virtual Machines - Thin OS & Micro VMs
26:42 - Container Security - Build Time (Base images)
29:49 - Container Security - Build Time (Multi-stage builds)
31:33 - Container Security - Build Time (Rootless & RUN)
36:02 - Container Security - Build Time (Mounting)
39:51 - Container Security - Build Time (SetUID Bit)
40:43 - Container Security - Build Time (Code Simplicity)
41:37 - Container Security - GitOps for Build Time
43:24 - Container Security - Immutable Containers (Vuln Scanning for images)
47:54 - Container Security - Container Isolation (eBPF & AppArmor/SE linux)
51:06 - Container Security - Container Isolation (Container fingerprinting)
52:41 - Maybe Next Time… (Sidecar containers)
55:35 - Maybe Next Time… (Secrets management)
56:56 - Resources
58:42 - Outro
Book - https://www.amazon.com/Container-Secu...
Additional Resources…
What is a Container? - • What is a Container?
Understanding the Difference Between Virtualization and Containers - • Understanding the Difference Between Virtu...
Beginners Guide to Containers Technology and How it Actually Works - • Beginners Guide to Containers Technology a...
What Have Namespaces Done for You Lately? - • What Have Namespaces Done for You Lately?
The presentation that inspired the Liz’s presentation above - • Cgroups, namespaces, and beyond: what are ...
Liz Rice - A Go Programmer's Guide to Syscalls - • GopherCon 2017: A Go Programmer's Guide to...
eBPF Superpowers - • eBPF Superpowers
Deck - https://speakerdeck.com/lizrice/ebpf-...
Kubernetes Hardening Guidance - https://media.defense.gov/2021/Aug/03...