Container-Security on krash.dev

Docker Security

Thu, 02 Feb 2023 00:00:00 +0000

Last Updated on 2nd Feb 2023.

Containers?#

Why do we need containers over VMs -

Efficient Resource Consumption between containers
Once License for services/OS
Low Compute Overhead

What does docker engine does?

Emulates Filesystem
Gives each container unique process ID
Isolation of container process

Communication between the architecture components -

Components
- Docker client (The one user interacts with)
- Docker Host
  - Docker Daemon
  - Images
  - Containers
- Registry
Docker client using serveral API calls sends the commands to Docker Engine which is being forwarded to containerd.
Commuication between docker daemon and containerd is facilated through gRPC calls.
Docker Client communicates with the Docker Daemon through a domain socket (if local) and through a TCP Socket (if remote).

What does runc do?

Kubernetes Concept

Mon, 17 Jan 2022 00:00:00 +0000

I have been wanting to learn about ~~kubernetes~~ k8s since long, and create this blog series. Here we are finally started (thanks to null cloud security study group ), so without wasting too much time let’s get started. I am learning this having a security mindset, to find common misconfigurations and understand the development process to understand the mitigation.

K8s is a container orchestrator. Before diving too much into the depth let’s see what orchestrators/orchestrations are.

NULLCON 2021 Training: DEVSECOPS

Sat, 27 Mar 2021 00:00:00 +0000

You don’t need money to buy expensive things, sometimes hard work pays off. And yes nullcon trainings are still expensive for me xD and I am grateful that I got this chance to attend one.

One year ago, I was going through the nullcon training schedule, and trying to understand the structure, and how much I can learn from it, because it was too expensive for me to get the actual training. Cut to March 1st , 2021, where I was attending a nullcon Training called – “DEVSECOPS – AUTOMATING SECURITY IN DEVOPS by Rohit Salecha”, not only as an attendee but also as a moderator for the event, because I was the one of the employees at Payatu.