-
Notifications
You must be signed in to change notification settings - Fork 34
Open
Labels
area/documentationarea/infrastructureenvironment/prodIssue affects only production environmentIssue affects only production environmentimpact/changelogThis change should be reflected in the NEWS.txt fileThis change should be reflected in the NEWS.txt fileimpact/deployManual actions will be required during deploymentManual actions will be required during deployment
Milestone
Description
- use ansible to deploy docker containers into the VM
- backups
- check for vulnerabilities/updates
- consider using
docker-maven-pluginfor building Docker images (Use docker-maven-plugin for building Docker images #83) - consider using https://github.com/docker/docker-bench-security
- configure GC of unused metadata/images (https://docs.docker.com/registry/garbage-collection/)
- dockerhub: update description
- dockerhub: configure auto-build (see https://habrahabr.ru/post/310530/)
- run with
--cap-drop all(see http://www.projectatomic.io/blog/2016/01/how-to-run-a-more-secure-non-root-user-container/) - run with
--security-opt=no-new-privileges(see http://www.projectatomic.io/blog/2016/03/no-new-privs-docker/) - add badge (https://microbadger.com/images/phpcoder/mystamps)
- consider using scanner (https://github.com/arminc/clair-scanner)
- https://github.com/replicatedhq/dockerfilelint
Follow-up to #534
Metadata
Metadata
Assignees
Labels
area/documentationarea/infrastructureenvironment/prodIssue affects only production environmentIssue affects only production environmentimpact/changelogThis change should be reflected in the NEWS.txt fileThis change should be reflected in the NEWS.txt fileimpact/deployManual actions will be required during deploymentManual actions will be required during deployment