How to handle security updates within Docker containers?

A Docker image bundles application and “platform”, that’s correct. But usually the image is composed of a base image and the actual application.

So the canonical way to handle security updates is to update the base image, then rebuild your application image.

Related Posts:

  1. Cannot connect to the Docker daemon at unix:/var/run/docker.sock. Is the docker daemon running?
  2. Docker can’t connect to docker daemon
  3. Explanation of polkitd Unregistered Authentication Agent
  4. Why does “docker attach” hang?
  5. WordPress sites being filled with random PHP files
  6. What permissions should my website files/folders have on a Linux webserver?
  7. When does `cron.daily` run?
  8. Is it normal to get hundreds of break-in attempts per day?
  9. What version of RHEL am I using?
  10. How to check if an RSA public / private key pair match
  11. Why do we use a OS Base Image with Docker if containers have no Guest OS?
  12. REJECT vs DROP when using iptables
  13. “POSSIBLE BREAK-IN ATTEMPT!” in /var/log/secure — what does this mean?
  14. Tips for Securing a LAMP Server
  15. How to add a security group to a running EC2 Instance?
  16. Heartbleed: how to reliably and portably check the OpenSSL version?
  17. Hundreds of failed ssh logins
  18. How should an IT department choose a standard Linux distribution?
  19. What is the difference between /sbin/nologin and /bin/false?
  20. How do I deal with a filename that starts with the hyphen (-) character?
  21. Bash: No such file or directory?
  22. What’s a .sh file?
  23. How to unmount a busy device
  24. How to unmount a busy device
  25. performing HTTP requests with cURL (using PROXY)
  26. No space left on device
  27. How can I exclude directories from grep -R?
  28. gcc: error: unrecognized command line option
  29. How to set proxy for wget?
  30. Pseudo-terminal will not be allocated because stdin is not a terminal
  31. Directory Inode vs Regular File Inode
  32. How to cat <> a file containing code?
  33. Diff command along with Grep gives “Binary file (standard input) matches”
  34. can’t remove python pip
  35. How would I get a cron job to run every 30 minutes?
  36. How to automatically redirect HTTP to HTTPS on Apache servers?
  37. Trying to use bash on Windows and got no installed distributions message
  38. “Unable to find remote helper for ‘https'” during git clone
  39. What is the difference between “#!/usr/bin/env bash” and “#!/usr/bin/bash”?
  40. tar: Cowardly refusing to create an empty archive
  41. How can I delete a user in linux when the system says its currently used in a process
  42. Command to change the default home directory of a user
  43. Post request with Wget?
  44. Telnet [Unable to connect to remote host: Connection refused]
  45. Terminal Multiplexer for Microsoft Windows – Installers for GNU Screen or tmux
  46. Can’t remove a directory in Unix
  47. Is there an alternative sleep function in C to milliseconds?
  48. Gedit command not working in kali linux terminal
  49. Syntax error near unexpected token ‘then’
  50. Curl : connection refused
  51. How to install Android SDK on Ubuntu?
  52. C fopen vs open
  53. How can I use grep to show just filenames on Linux?
  54. Bash script prints “Command Not Found” on empty lines
  55. Bash export command
  56. How to edit gitignore file
  57. Adding a new entry to the PATH variable in ZSH
  58. CronJob not running
  59. How to configure WP filesystem access in Linux (Ubuntu Server)?
  60. My WordPress is giving me an 403 error when saving post/draft with specific words
  61. How can I sort du -h output by size
  62. What exactly do the colors in htop status bars mean?
  63. How to run a server on port 80 as a normal user on Linux?
  64. Showing total progress in rsync: is it possible?
  65. How to bind MySQL server to more than one IP address?
  66. Moving an already-running process to Screen
  67. What’s the best way of handling permissions for Apache 2’s user www-data in /var/www?
  68. Permission denied (publickey). SSH from local Ubuntu to Amazon EC2 server
  69. How to setup passwordless `sudo` on Linux?
  70. LVM dangers and caveats
  71. How to know from which yum repository a package has been installed?
  72. How do I verify the speed of my NIC?
  73. tar – Remove leading directory components on extraction
  74. How to list Apache enabled modules?
  75. How to forcibly close a socket in TIME_WAIT?
  76. Colors in bash after piping through less?
  77. How can I monitor hard disk load on Linux?
  78. Why does sudo command take long to execute?
  79. How to display certain lines from a text file in Linux?
  80. What’s the reverse DNS command line utility?
  81. Can you have more than one ~/.ssh/config file?
  82. How bad is it really to install Linux on one big partition?
  83. How do I extract login history?
  84. How to force nginx to resolve DNS (of a dynamic hostname) everytime when doing proxy_pass?
  85. GPG does not have enough entropy
  86. SSH from A through B to C, using private key on B [closed]
  87. Is it possible to reboot a Linux OS without rebooting the hardware?
  88. Why don’t EC2 ubuntu images have swap?
  89. SSHFS mount that survives disconnect
  90. Temporarily ignore my `~/.ssh/known_hosts` file?
  91. Does the “bs” option in “dd” really improve the speed?
  92. How to get TX/RX bytes without ifconfig?
  93. What solutions exist to allow the use of revision control for server configuration files? [closed]
  94. Curl: disable certificate verification
  95. Is there a way to do a remote “ls” much like “scp” does a remote copy?
  96. How to apply a filter to real time output of `tail -f `?
  97. Practical maximum open file descriptors (ulimit -n) for a high volume system
  98. Dump a linux process’s memory to file
  99. How to handle relative urls correctly with a reverse proxy
  100. Where’s the conventional place to store git repositories in a linux file system tree?

Leave a Comment