Config - Security in Docker

Question 1

On a host, how are a container and the host separated from each other?

Answer 1

Through the use of Linux namespaces

Question 2

Are processes running inside containers visible from the outside?

Answer 2

Yes, visible with a different pid than when viewed from inside the container

Question 3

In docker how do you specify, what user you want to run a docker image as, so as to not run it as the root user

Answer 3

‘docker run –user=1000 ubuntu sleep 3600’

User can also be set in the Dockerfile

Question 4

How does docker limit the amount of possibilities that a container started by the root user has?

Answer 4

• from startup the amount of capabilities is limited
• processes running inside the container do not have the same privileges as the root user
• capabilities can be added or withdrawn