Dockerfiles are the source of many container images. Many bad security practices that affect images begin inside a Dockerfile. This lab will give you some hands-on experience with analyzing a Dockerfile and locating settings that could cause unnecessary security risks in the resulting image.
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Check the securi-api Dockerfile
You can find the Dockerfile at
/home/cloud_user/securi-api/Dockerfile. This application is a simple Nginx webserver and should not need any additional software.Edit the file to remove any major security issues or bad security practices.
- Check the securi-webserver Dockerfile
You can find the Dockerfile at
/home/cloud_user/securi-webserver/Dockerfile.Edit the file to remove any major security issues or bad security practices.
If you need an OS user, you can use
nginxuser.- Check the securi-users Dockerfile
You can find the Dockerfile at
/home/cloud_user/securi-users/Dockerfile.Edit the file to remove any major security issues or bad security practices.
