https://github.com/alexandreelise/caps

An example of restricted capabilities using cgroups features directly in compose.yaml for Docker containers
https://github.com/alexandreelise/caps

cybersecurity-awareness devops docker docker-compose hardening hardening-commands hardening-guides hardening-steps linux-capabilities segcomp

Last synced: 11 days ago
JSON representation

An example of restricted capabilities using cgroups features directly in compose.yaml for Docker containers

• Host: GitHub
• URL: https://github.com/alexandreelise/caps
• Owner: alexandreelise
• License: mit
• Created: 2026-04-27T21:31:29.000Z (about 2 months ago)
• Default Branch: main
• Last Pushed: 2026-04-27T21:51:06.000Z (about 2 months ago)
• Last Synced: 2026-04-27T23:25:41.000Z (about 2 months ago)
• Topics: cybersecurity-awareness, devops, docker, docker-compose, hardening, hardening-commands, hardening-guides, hardening-steps, linux-capabilities, segcomp
• Homepage: https://apiadept.com
• Size: 3.91 KB
• Stars: 0
• Watchers: 0
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# CAPS

> An attempt to mitigate resource exhaustion using cgroups features directly in compose.yaml for Docker containers

> [!TIP]

> Don't let technical problems KILL your AMBITIONS...

![visitor badge](https://visitor-badge.laobi.icu/badge?page_id=alexandreelise.caps&style=flat&format=true)

![GitHub followers](https://img.shields.io/github/followers/alexandreelise?style=flat)

![YouTube Channel Views](https://img.shields.io/youtube/channel/views/UCCya8rIL-PVHm8Mt4QPW-xw?style=flat&label=YouTube%20%40ApiAdept%20vues)

## PRE-REQUISITE:

- Know how to use the command line

- Know docker and docker compose basic commands 

## USAGE:

3 steps :

Step 1:

Clone this repo or use the example ```compose.yaml``` file and adapt it:

```shell

git clone https://github.com/alexandreelise/caps

```

Step 2:

Go to the directory you just cloned and run that command in your terminal

```shell

cd caps &&

APP_IMAGE=php:8.5-apache  docker compose up -d

```

or 

```shell

cd caps &&

APP_IMAGE=replace_with_your_favourite_docker_image_here  docker compose up -d

```

Step 3:

Run ```shell docker compose stats ``` command to **VERIFY** the **RESOURCES** are **ACTUALLY** **RESTRICTED** as **EXPECTED**

```shell

docker compose stats

```

That's it! You have successfully mitigated resource exhaustion of your system.