Docker

Use Docker to build poste, self-built mail server

The self-built email service is not limited by the amount of emails sent, and the cost of sending emails in batches is lower, but the deployment is relatively complicated and it is easy to go into the trash. However, more and more service providers have already developed products that support one-click deployment, which greatly reduces the difficulty of deployment and use.

Use Clair to scan Docker images for vulnerabilities

Docker provides a docker hub that allows users to upload the created images for other users to download and quickly build the environment. But it also brings some security issues. The downloaded image is maliciously implanted into the backdoor, the image is tampered with during transmission, whether the environment built by the image contains loopholes, etc.

Running macOS in Linux with Docker-OSX

Your CPU should support virtualization such as Intel VT or AMD-V. Enable it in your BIOS/UEFI before continuing. (For example, on my Ryzen system, this is an "AMD SVM" setting that must be enabled in the BIOS.)

Use SELinux in Docker containers

Security-Enhanced Linux (SELinux) is a Linux kernel security module that provides mechanisms to support access control security policies, including mandatory access control (MAC). Containers support running on SELinux-enabled hosts

Understand how uid and gid work in Docker containers

Understanding how user names, group names, user IDs (uid), and group IDs (gid) map between the processes running in the container and the host system is important for building a secure system. If no other options are provided, the process in the container will be executed as root