Though a relative new technology there are very few articles and research as to how can we secure the docker container that are coming in the market. A Docker container image is a lightweight, standalone, executable package of software that includes everything needed to run an application: code, runtime, system tools, system libraries and settings. All this point to a 2018 that’s set to build on this progress and enable running extremely secure container workloads. Especially in security, we saw new features being launched, new products entering the market, and new best practices emerge. The Docker ecosystem has come a long way in 2017. Containers allow a developer to package up an application with all of the parts it needs, such as libraries and other dependencies, and ship it all out as one package. Both are created as helper tools that can be used to manage a cluster of containers and treat all servers as a single unit.ĭocker is a tool designed to make it easier to create, deploy, and run applications by using containers (OpenSource,2017). Kubernetes and Docker Swarm are probably two most commonly used tools to deploy containers inside a cluster.

Each cluster management technology has something unique and different to offer. Some organizations struggle when trying to scale Docker, one of the leading container technologies.There are couple of Open Source container cluster management tool.

Container scalability, for example, remains somewhat of a mystery. It also stops compatibility problems between applications that reside on the same operating system (OS).But despite their success, containers still present challenges. This isolation means that if anything goes wrong in that single container (e.g., excessive consumption of resources by a process) it only affects that individual container and not the whole VM or whole server. Containers create an isolation boundary at the application level rather than at the server level. The key thing to recognize with cloud containers is that they are designed to virtualize a single application-e.g., you have a MySQL container and that's all it does, provide a virtual instance of that application. Containers promise a streamlined, easy-to-deploy and secure method of implementing specific infrastructure requirements, and they also offer an alternative to virtual machines. Although it's still early days, containers are seeing increasing use in production environments. The world's top technology companies, including Microsoft, Google and Facebook, all use them. At the moment, cloud containers are a hot topic in the IT world in general, and security in particular.

Kubernetes in action pdf