Container Security Workshop

Linux® containers provide convenient application packing and run-time isolation in multi-tenant environments. However, the security implications of running containerized applications are often taken for granted. For example, today it is very easy to pull Docker images from the internet and run them in the enterprise without examining their content and authenticity. In this lab, you'll complete a series of hands-on exercises aimed at understanding the concepts, challenges, and best practices associated with deploying containers in a secure fashion.

This lab session is a low-level, hands-on introduction to container security using Red Hat® Enterprise Linux 8. It can be delivered by an instructor or consumed as a series of self-paced exercises.

Prerequisites

• Understanding of fundamental user and administrative Red Hat Enterprise Linux concepts
• Basic text editing skills using vim or nano
• Introductory knowledge of Docker is helpful.

Workshop exercises

Lab 1 - Container Security workshop -welcome
Lab 2 - Lab environment introduction
Lab 3 - Securing container registries
Lab 4 - Working with pods
Lab 5 - Isolation via kernel namespaces
Lab 6 - SELinux policy and container security
Lab 7 - Containerinspectionwith Podman &Skopeo
Lab 8 - Signing container images
Lab 9 - Introduction to building containers with Buildah
Lab 10 - A final homework assignment

Virtual workshop details

Time: 1:00 p.m. - 4:30 p.m. EDT

Date: June 8, 2021

Any questions? Please email lihoang@redhat.com