Скачать или смотреть DevOpsDaysRiga 2017 | Daniel Houston | Thinking outside the box: The Docker socket security concern

Daniel is a technical team lead in Accenture Lativa, having recently moved here from the UK.
Previously, Daniel worked in IBM for around 5 years, where he helped found the DevOps Department in IBM Cambridge. While he was there he took part in a number of patent groups, He is a named inventor on an Intelligent route navigation patent https://www.google.com/patents/US9347780 and has some patents awaiting publish.

The Docker socket is insecure when mounted through to containers, allowing subsequent contains to escape the docker model and root the docker host.

Many use Docker in their CI pipelines; but few everyday users are aware of the security issues surrounding the docker socket on docker hosts and the complications this brings. I want to highlight one such issue with the docker socket when creating docker containers within docker containers.