Docker Security – ITFROMZERO – Share tobe shared!

Configuring Seccomp Profiles for Linux and Docker Containers: Reducing Attack Surface by Filtering System Calls

By admin June 16, 2026

A practical guide to configuring Seccomp profiles for Docker containers and Linux services to filter dangerous system calls, reduce attack surface, and prevent privilege escalation attacks. Covers custom JSON profiles, systemd configuration, and debugging syscalls with strace.

Security

Trivy: The ‘Sentry’ for Ultra-Fast Docker and K8s Vulnerability Scanning for DevOps

By admin May 1, 2026

Don't leave your container systems vulnerable to hackers. A detailed guide on using Trivy for Docker and Kubernetes scanning, with automated CI/CD integration in minutes.

Virtualization

Kata Containers: When VM Security Meets Container Speed

By admin April 29, 2026

A guide to installing Kata Containers to combine VM security with container speed. Learn to configure microVMs for Docker and compare QEMU vs Firecracker.

Docker

Optimizing Docker Images with Multi-stage Builds: A Guide to Reducing Size and Enhancing Security

By admin March 28, 2026

Docker's Multi-stage Build is a technique that helps create more compact and secure images by separating build and runtime environments. This article provides a detailed guide on its use, from basic examples to advanced optimization techniques, along with practical experience from production deployment.