container hardening Archives - ITFROMZERO

Writing Custom Docker Seccomp Profiles: Hardening System Calls from Dev to Prod

By IT From Zero October 15, 2026

How to build custom Docker Seccomp profiles using a Default Deny model. Learn to profile syscalls with strace, configure OCI-compliant JSON, and debug violations via Auditd.

Security

Configuring Seccomp Profiles for Linux and Docker Containers: Reducing Attack Surface by Filtering System Calls

By IT From Zero June 16, 2026

A practical guide to configuring Seccomp profiles for Docker containers and Linux services to filter dangerous system calls, reduce attack surface, and prevent privilege escalation attacks. Covers custom JSON profiles, systemd configuration, and debugging syscalls with strace.