Topic: docker
Docker will soon deprecate password logins via CLI when SSO enforcement is on
Starting September 16th, Docker is deprecating the ability to use passwords to sign-in to services via its CLI when users have Single Sign-On (SSO) enforcement turned on. SSO enables users to authenticate once and get access to multiple different services. In this case, that includes Docker Desktop, Docker Hub, Docker Scout, and Docker Build Cloud. … continue reading
Kubernetes – ITOps Times Open Source Project of the Week
When we first started the ITOps Open Source Project of the Week series, Kubernetes was already such a large and popular project that no one needed us to tell them about it, so it’s never actually been featured in this series. But given that the project is celebrating its 10 year anniversary this month, we … continue reading
Oracle Cloud Infrastructure GoldenGate service is now available
The new Oracle Cloud Infrastructure (OCI) GoldenGate service is now available as a highly automated, fully managed cloud service that enables customers to design, execute, orchestrate and monitor their data replication and streaming data events. The service uniquely addresses both event-based data integration for operational databases and analytic data stores in one solution and works … continue reading
ITOps Times Open-Source Project of the Week: Podman
Podman is a tool for managing OCI containers and pods that are made from groups of containers. It provides APIs for managing containers, pods, container images, and more. Podman’s GitHub documentation states that the project is based on libpod, a library for container lifecycle management that is also contained in this repository. The latest 2.2.1 … continue reading
Mirantis launches Docker Enterprise Container Cloud
At Mirantis’ inaugural Launchpad 2020 conference, the company announced the release of Docker Enterprise Container Cloud. Mirantis had previously acquired the Docker Enterprise Platform last November. According to the company, this new solution will provide faster ways to ship code in public clouds and on-premises. It helps reduce some of the complexity of Kubernetes by … continue reading
Demystifying a Docker image
Six months ago ForAllSecure started analyzing Docker images. What does this mean? Imagine we have a user who wants us to fuzz their application. How do they give it to us? Do they tar it up? Do they give us access to an environment where it’s running? Do we integrate into their build pipeline? Applications … continue reading
Mirantis obtains the Docker Enterprise Platform business from Docker
Mirantis is expanding its Kubernetes offering with the help of the Docker Enterprise Platform. The company announced it would be acquiring the business from Docker in an effort to deliver Kuberetes as a service and provide a consistent experience for developers. “The Mirantis Kubernetes technology joined with the Docker Enterprise Container Platform brings simplicity and … continue reading
ITOps Times Open-Source Project of the Week: Dry
This week we’re highlighting an open-source project, Dry, that makes it easier to manage Docker and Docker Swarm. Dry is a terminal application that shows information about containers, images, and networks. For those running Swarm clusters, it also shows information about nodes, service, stacks, and other Swarm constructs. In addition to showing information, it can … continue reading
6 Best Practices for Creating a Container Platform Strategy
Infrastructure and operations (I&O) leaders globally are facing demand from the C-level to use containers to speed up application delivery. But the rapid adoption of container technology does not necessarily mean that it is a fit for every organization. Containers can help enterprises modernize legacy applications and create new cloud-native applications that are both scalable … continue reading
ITOps Open-Source Project of the Week: Lazydocker
Lazydocker is an open-source project that aims to reduce the necessity of memorizing Docker commands. Created by software engineer Jesse Duffield, Lazydocker acts as a GUI for Docker and Docker-compose terminals. The rationale behind the project is that “memorising docker commands is hard. Memorising aliases is slightly less hard.” Duffield explains on the project’s GitHub … continue reading
Docker suffers from race condition flaw
It has been revealed that all Docker versions are vulnerable to a symlink-race attack. A CVE-2018-15664 vulnerability was found by software engineer Aleksa Sarai who submitted the bug to the Docker security team. “The basic premise of this attack is that FollowSymlinkInScope suffers from a fairly fundamental TOCTOU attack. The purpose of FollowSymlinkInScope is to … continue reading
Snyk: Container security requires changes in culture more than changes in technology
The main challenge organizations will face securing their containers is not the technical part, but the cultural and organizational changes. This is according to a recently released report from Snyk that focused heavily on the current state of Docker security. The report revealed that half of the top 10 free certified Docker images have known … continue reading
