Earlier today, Dr. Diogo Mónica, Security Lead here at Docker Inc., presented during a Docker Online Meetup that was all about the security enhancements in Docker Engine 1.10! Diogo discussed all of the big security features in Docker Engine 1.10 you’ve been asking for (which are now available to use!) including: user namespacing for isolating system users seccomp profiles for filtering syscalls an authorization plugin system for restricting access to Engine features Below are the recorded video and slides from today’s Docker Online Meetup. More about Docker 1.10’s huge leap forward for container security is also available to read in this blog…
On Wednesday, we hosted a Docker Online Meetup that was all about what’s new in Docker 1.10! Director of Product Management Ben Firshman and Software Engineer Dongluo Chen presented an overview of the new features before doing a deep dive into the new release. The recorded video and slides from the meetup are available to watch below.
We’re pleased to announce Docker 1.10, jam-packed with stuff you’ve been asking for. It’s now much easier to define and run complex distributed apps with Docker Compose. The power that Compose brought to orchestrating containers is now available for setting up networks and volumes. On your development machine, you can set up your app with multiple network tiers and complex storage configurations, replicating how you might set it up in production. You can then take that same configuration from development, and use it to run your app on CI, on staging, and right through into production. Check out the blog…
It’s been a crazy past few months with DockerCon and the holidays but yet we are still hacking away on the Docker Engine and have some really awesome security features I would like to highlight with the release of Docker Engine 1.10. Security is very important to us and our approach is two-fold; one is to provide a secure foundation on which to build applications and second, to provide capabilities to secure the applications themselves. Docker Engine is the foundation on which you pull, build and run containers and all the features listed below are about giving your more granular…
In the previous version of Docker Engine we added a completely new system for managing networks and volumes, and we’re pleased to announce full support for these features in Docker Compose. Compose files used to describe just one thing: the services that make up your distributed application. We’ve now added networks and volumes to the mix, allowing you to describe much more complex applications. You can set up your app on your development machine with multiple network tiers and complex storage configurations, replicating how you might set it up in production. You can then take that same configuration from development,…
This post describes the upcoming changes to the way Docker Engine stores images and filesystem data in containers. These changes are coming to users starting from version v1.10.