Security is an important aspect of any deployment. There should be security in the applications, devices, and network to disallow any unauthorized access. There should also be security in the container/docker deployment so as to disallow unauthorized access to system resources reserved for the container. We will understand how Docker container ensures network and resource isolation and security.
Docker uses the namespaces to isolate the container from other containers running on the host. There are three important namespaces that take part in providing security:
Process namespace: Each Linux system has a process tree, that is, there is an init process with process ID 1, which is also called the root process. This root process spawns other daemons and processes as a child process. These daemons and processes can then create their own child and so on. It is possible to create a child namespace with one of the child as the root process. All the processes running in the child...