Stack

Stack

Docker Design Disadvantages

Daemon runs as root

Client is not authenticated by default

Client controls daemon without authorization

Client can be authenticted using certificates

Security issues

docker run -v /:/host

docker run -v /var/run/docker.sock:

docker run --privileged