Skip to content

Instantly share code, notes, and snippets.

@twobombs

twobombs/docker secops benchmark

Last active June 5, 2019 08:48
Show Gist options
  • Save twobombs/2cf41e39e85fdafecf710bfb32e270db to your computer and use it in GitHub Desktop.
Save twobombs/2cf41e39e85fdafecf710bfb32e270db to your computer and use it in GitHub Desktop.
Download ZIP
Raw
docker secops benchmark
docker run -d --net host --pid host --userns host --cap-add audit_control \
-e DOCKER_CONTENT_TRUST=$DOCKER_CONTENT_TRUST \
-v /etc:/etc \
-v /usr/bin/docker-containerd:/usr/bin/docker-containerd \
-v /usr/bin/docker-runc:/usr/bin/docker-runc \
-v /usr/lib/systemd:/usr/lib/systemd \
-v /var/lib:/var/lib \
-v /var/run/docker.sock:/var/run/docker.sock \
--label docker_bench_security \
docker/docker-bench-security
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment