Docker

Understand how uid and gid work in Docker containers

Understanding how user names, group names, user IDs (uid), and group IDs (gid) map between the processes running in the container and the host system is important for building a secure system. If no other options are provided, the process in the container will be executed as root

Use SELinux in Docker containers

Security-Enhanced Linux (SELinux) is a Linux kernel security module that provides mechanisms to support access control security policies, including mandatory access control (MAC). Containers support running on SELinux-enabled hosts

Running macOS in Linux with Docker-OSX

Your CPU should support virtualization such as Intel VT or AMD-V. Enable it in your BIOS/UEFI before continuing. (For example, on my Ryzen system, this is an "AMD SVM" setting that must be enabled in the BIOS.)

Use Clair to scan Docker images for vulnerabilities

Docker provides a docker hub that allows users to upload the created images for other users to download and quickly build the environment. But it also brings some security issues. The downloaded image is maliciously implanted into the backdoor, the image is tampered with during transmission, whether the environment built by the image contains loopholes, etc.

Use Docker to build poste, self-built mail server

The self-built email service is not limited by the amount of emails sent, and the cost of sending emails in batches is lower, but the deployment is relatively complicated and it is easy to go into the trash. However, more and more service providers have already developed products that support one-click deployment, which greatly reduces the difficulty of deployment and use.

Docker artifact Compose Generator

Compose Generator is a command line tool that can help you set up a Docker project as quickly as possible. The command line interface (cli) acts as an assistant for common Docker tasks