Why container security matters in Docker - See It in Action

Why Container Security Matters

📖 Scenario: You are working in a team that uses containers to run applications. Containers help run apps quickly and consistently. But if containers are not secure, bad people can break into them and cause problems.Understanding why container security matters helps keep apps safe and running smoothly.

🎯 Goal: Learn the basics of container security by creating a simple Docker container and checking its security settings.

📋 What You'll Learn

Create a Dockerfile with a basic image

Add a configuration variable for a non-root user

Use Docker commands to check container user and permissions

Print the container user to confirm security setup

💡 Why This Matters

🌍 Real World

Containers are widely used to package and run applications. Securing containers by running them as non-root users helps prevent attackers from gaining full control if they break in.

💼 Career

Understanding container security is essential for DevOps engineers and developers to build safe and reliable applications in production environments.

1

Create a basic Dockerfile

Create a file named Dockerfile with the exact content: FROM alpine:latest

Docker

# Create a Dockerfile with the base image alpine:latest
# Your code here

Need a hint?

Use the FROM instruction to specify the base image.

2

Add a non-root user configuration

Add a line to the Dockerfile to create a user named appuser and switch to this user using USER appuser

Docker

FROM alpine:latest
# Add user creation and switch to appuser
# Your code here

Need a hint?

Use RUN adduser -D appuser to create the user and USER appuser to switch.

3

Build and inspect the container user

Write the exact command to build the Docker image named secureapp from the current directory and then run a container from it to print the current user with whoami

Docker

FROM alpine:latest
RUN adduser -D appuser
USER appuser
# Build the image and run the container to check user
# Your code here

Need a hint?

Use docker build -t secureapp . to build and docker run --rm secureapp whoami to check the user.

4

Display the container user output

Run the command docker run --rm secureapp whoami and print the output exactly as it appears

Docker

# Run the container and print the user output
# Your code here

Need a hint?

The output should be the username appuser indicating the container runs as a non-root user.