Daniel Walsh
Daniel Walsh's contributions
Opensource.com - Are Docker containers really secure?
Daniel Walsh
This article from opensource.com is based on a talk I gave at DockerCon this year. It will discuss Docker container security, where we are currently, and where we are headed. Containers do not contain I hear and read about a lot of people assuming that Docker containers actually sandbox applications—meaning they can run random applications on their system as root with Docker. They believe Docker containers will actually protect their host system. I have heard people say Docker containers are...
Running systemd within a Docker Container
Daniel Walsh
UPDATE: Read the new article " How to run systemd in a container " for the latest information. I have been working on Docker for the last few months, mainly getting SELinux added to help CONTAIN Containers. libvirt-sandbox – virt-sandbox-service For the last couple of years I was working on a different container technology using libvirt-lxc, in addition to my regular SELinux job. I built the virt-sandbox-service tool which would carve up your host system into a bunch of service...
Opensource.com - Are Docker containers really secure?
Daniel Walsh
This article from opensource.com is based on a talk I gave at DockerCon this year. It will discuss Docker container security, where we are currently, and where we are headed. Containers do not contain I hear and read about a lot of people assuming that Docker containers actually sandbox applications—meaning they can run random applications on their system as root with Docker. They believe Docker containers will actually protect their host system. I have heard people say Docker containers are...
Running systemd within a Docker Container
Daniel Walsh
UPDATE: Read the new article " How to run systemd in a container " for the latest information. I have been working on Docker for the last few months, mainly getting SELinux added to help CONTAIN Containers. libvirt-sandbox – virt-sandbox-service For the last couple of years I was working on a different container technology using libvirt-lxc, in addition to my regular SELinux job. I built the virt-sandbox-service tool which would carve up your host system into a bunch of service...