About the Author

• protests against the oppressive regime of dictator Lukashenko
• LinkedIn - zy/). Let's collaborate and create some cool solutions together :)
• LinkedIn - zy/). Let's collaborate and create some cool solutions together :)

Another Information Sources

Technologies for security

• doger.io
• doger.io
• doger.io
• doger.io
• doger.io
• doger.io
• doger.io
• doger.io
• sysdig-container-ecosystem
• doger.io

Best practices

• The Twelve-Factor App
• Container Best Practices

Clouds

• Amazon EC2 Container Service
• Google Cloud Platform
• Jelastic
• Joyent
• Kubernetes - tenant deployment. Origin adds developer and operations-centric tools on top of Kubernetes to enable rapid application development, easy deployment and scaling, and long-term lifecycle maintenance for small and large teams.
• Mesosphere
• Virtuozzo
• Rancher
• Docker Swarm
• Azure Container Service
• CIAO
• Alibaba Cloud Container Service
• Mesosphere
• Alibaba Cloud Container Service
• Nomad
• Azure Container Service

Containers

• libvirt
• systemd-nspawn
• systemd
• Kata Containers
• runc
• Bocker
• LXC
• Vagga
• libct
• porto
• udocker
• Let Me Contain That For You
• railcar
• runv
• firecracker
• sysbox
• footloose
• Rocket
• podman
• youki

Dashboard

• LXC-Web-Panel
• Liman
• portainer
• swarmpit

Filesystem

• umoci
• dgr
• Whaler
• dive
• go-containerregistry
• kaniko
• docker pushrm
• container-diff
• skopeo
• buildah

Foundations

• OPEN CONTAINER INITIATIVE
• Cloud Native Computing Foundation
• Cloud Foundry Foundation

Hypervisors

• Docker
• OpenVZ
• containerd
• MultiDocker
• LXD

Operating Systems

• CoreOs
• Project Atomic
• Clear Linux Project
• CargOS
• OSv
• HypriotOS
• MCL
• Photon
• HypriotOS
• Clear Linux Project

Partial Access

• nsenter
• ip-netns
• unshare
• butter
• CRIU
• python-nsenter
• butter
• pyspaces
• Moby
• nsenter
• ip-netns
• unshare

Sandboxes

• Firejail
• Snappy
• xdg-app
• NsJail
• Subuser
• Lxroot
• singularity

Security

Levels of security problems

• src

Links

• CIS Security Benchmarks
• Ask HN: Best Linux sandbox?
• Understanding docker security and best practices
• Update on Ubuntu Phone security issue
• Don't expose the Docker socket (not even to a container)
• RedHat Blog
• What’s Next for Containers? User Namespaces
• Architecting Containers Part 1: Why Understanding User Space vs. Kernel Space Matters
• Architecting Containers Part 2: Why the User Space Matters
• Secure Your Containers with this One Weird Trick
• When to use-Docker alternatives rkt and LXD
• The container is a lie
• Linux Container Security
• Linux Container Security
• Update on Ubuntu Phone security issue
• Docker, Linux Containers (LXC), and security
• When to use-Docker alternatives rkt and LXD

Technologies for security

• src
• src
• src
• Grsecurity
• Control groups (cgroups)
• Kernel namespaces
• sVirt - selinux for kvm
• Control groups (cgroups)
• Kernel namespaces
• sVirt - selinux for kvm
• Control groups (cgroups)

Tools

• CoreOS Clair
• trireme
• Docker bench security
• OpenSCAP
• drydock
• goss
• sockguard
• gvisor
• oci-seccomp-bpf-hook
• docker-explorer
• trireme

Specifications

• App Container basics
• Systemd Container Interface
• Nulecule Specification
• Oracle microcontainer manifesto
• App Container basics
• Cloud Native Application Bundle Specification