Chapter 14, Docker Security
Here are some sample answers to the questions presented in this chapter:
- You would add the
--read-onlyflag; or, if you wanted to make a volume read-only, you would add:ro. - In an ideal world, you would only be running a single process per container.
- By running the Docker Bench Security application.
- The socket file for Docker, which can be found at
/var/run/docker.sock; and also, if your host system is running Systemd,/usr/lib/systemd. - False; Quay scans both public and private images.
