Skip to main content

Measures

In Kubernetes, consideration should be given to moving away from Docker. A few reasons for this are:

-> Docker is becoming more and more commercial, creating questionable choices. For example, in the near future, it will no longer be possible to pump more than 20 containers a day. Further, all containers will be deleted from Dockerhub which have not been used for 2 months or longer. So the trend is that after a certain point, features will probably only be usable through subscriptions.

-> The Docker daemon requires root privileges, which is a security issue if users are granted root privileges. It also means that an improperly configured Docker container could potentially have unrestricted access to the host file system. Admins can prevent this by following some basic best practices, such as using only container images from trusted vendors, but the possibility still exists.


Included in the following risks