Securing Docker in the wild

By default, the Docker API is exposed over a local UNIX socket. If you want to control Docker from a remote host, you can configure Docker to expose its API over a TCP socket instead. However, Docker itself doesn’t implement authentication. We will see here how we can use SSL certificate authentication to encrypt and authenticate the Docker API. The plan This is a very simple recipe, using socat in front of the Docker API. socat will accept HTTPS connections, make sure that the client shows an a...

Submit