https://krash.dev/tags/hardening/Recent content in Hardening on krash.devHugoen-usFri, 14 Aug 2026 08:29:09 +0530https://krash.dev/posts/docker-security/Thu, 02 Feb 2023 00:00:00 +0000https://krash.dev/posts/docker-security/<p><em>Last Updated on <strong>2nd Feb 2023</strong></em>.</p> <h1 id="containers">Containers?<a class="heading-anchor" href="#containers" aria-label="Link to this section">#</a> </h1> <p>Why do we need containers over VMs -</p> <ul> <li>Efficient Resource Consumption between containers</li> <li>Once License for services/OS</li> <li>Low Compute Overhead</li> </ul> <p>What does docker engine does?</p> <ul> <li>Emulates Filesystem</li> <li>Gives each container unique process ID</li> <li>Isolation of container process</li> </ul> <p>Communication between the architecture components -</p> <ul> <li>Components <ul> <li>Docker client (The one user interacts with)</li> <li>Docker Host <ul> <li>Docker Daemon</li> <li>Images</li> <li>Containers</li> </ul> </li> <li>Registry</li> </ul> </li> <li>Docker client using serveral API calls sends the commands to Docker Engine which is being forwarded to containerd.</li> <li>Commuication between docker daemon and containerd is facilated through <a href="https://krash.dev/posts/grpc-concepts">gRPC</a> calls.</li> <li>Docker Client communicates with the Docker Daemon through a domain socket (if local) and through a TCP Socket (if remote).</li> </ul> <p>What does <code>runc</code> do?</p>