Open
Description
- use ansible to deploy docker containers into the VM
- backups
- check for vulnerabilities/updates
- consider using
docker-maven-plugin
for building Docker images (Use docker-maven-plugin for building Docker images #83) - consider using https://github.com/docker/docker-bench-security
- configure GC of unused metadata/images (https://docs.docker.com/registry/garbage-collection/)
- dockerhub: update description
- dockerhub: configure auto-build (see https://habrahabr.ru/post/310530/)
- run with
--cap-drop all
(see http://www.projectatomic.io/blog/2016/01/how-to-run-a-more-secure-non-root-user-container/) - run with
--security-opt=no-new-privileges
(see http://www.projectatomic.io/blog/2016/03/no-new-privs-docker/) - add badge (https://microbadger.com/images/phpcoder/mystamps)
- consider using scanner (https://github.com/arminc/clair-scanner)
- https://github.com/replicatedhq/dockerfilelint
Follow-up to #534