Docker Security Practices

We often get asked how to secure docker and what are good practices for running containers securely.

First, we need to understand the possible attack vectors:

• Insecurely exposed - the most common attack vector, users often expose the Web-UI of apps without securing...

Introducing Linuxserver API

We'd like to introduce our new API available under:

• https://api.linuxserver.io/
• https://docs.linuxserver.io/API/

It currently has a single endpoint under /api/v1/images for obtaining information about our images, it gets updated several times a day, and all...

Many years ago we wrote a blog post on Docker networks and how to use them, but that was 2017 and this is now so surely everything has changed?

Well, not really, but at lot of this stuff is abstracted away by management interfaces and people don't understand what's going on behind the scenes s...

In a couple of prior articles (here and here) we showcased the capabilities of our WireGuard Docker container with some real world examples. At the time, our WireGuard container only supported one active tunnel at a time so the second article resorted to using multiple WireGuard containers r...

Introduction

WireGuard at this point needs no introduction as it became quite ubiquitous especially within the homelab community due to its ease of use and high performance. We previously showcased several ways to route host and container traffic through our WireGuard docker container in a prio...

Table Of Contents:

• Introduction
• Routing All Traffic Through WireGuard
• Routing Docker Container Traffic Through WireGuard
  • Setting up a container to use the WireGuard container's network stack
  • Routing a container's traffic through the WireGuard container via routing table
    • Incoming Po...

Introduction

Zero Trust Architecture is the practice of designing systems based on the principle of never trust, always verify, as opposed to the traditional trust, but verify principle . It has become quite a popular buzz word of late, in light of all the recent successful cyber attacks, comp...

CrowdSec is a free, open-source and collaborative IPS; it's like Fail2Ban but you share your bans with all of the other users to try and pre-emptively block malicious hosts. We recently published a docker mod to add the CrowdSec nginx bouncer to our swag and nginx containers so it seemed a good o...

Bitwarden is an awesome open source password manager that I've been using for a while. However I've never been entirely comfortable with storing my password database on someone else's computer, so I decided to look into options for self-hosting it.

Enter bitwarden_rs; an unofficial implementati...