Docker Hardening, Security, and Advanced Docker

Course description

This course is designed for anyone who wants to deepen their knowledge of Docker and the implementation of this technology as a broad application infrastructure within their company. You will learn how to properly "dockerize" applications to make them robust and stable.

Step by step, you will go through the entire process from implementing containers within different networks, to creating microservices, and finally deploying them stably. All of this while respecting best practices for creating and executing these types of applications. In the practical examples, we will test all the advanced techniques offered by Docker and its ecosystem. Thanks to the instructors' extensive practical experience, we will also focus on the most common issues and frequent mistakes made by Docker users.

Target audience

• System administrators
• Application developers
• IT professionals
• IT students interested in learning Docker technology

Prerequisites

• Knowledge of the Linux operating system (command-line work, knowledge of basic shell tools)
• Basic Docker knowledge (knowledge of nomenclature and basic Docker operations - container launching, etc.)
• Prior attendance at our Docker Fundamentals course is highly recommended

Course objectives

Course participants will learn:

• The DevSecOps profile
• Creating different Docker networks
• Docker orchestration and microservices
• Docker Swarm implementation
• Docker Compose implementation
• Docker Bench Security implementation
• The TUF update framework
• Docker Content Trust
• Docker security: tools and best practices

Optional tool

• Your own virtual server to perform the exercises via SSH.

Course content

1. DevSecOps

• What is DevSecOps
• From DevOps to DevSecOps
• DevSecOps implementations
• DevSecOps plan, pillars, governance
• DevSecOps success criteria
• The DevSecOps profile
• DevSecOps tasks, tools, processes, and culture

2. Docker Networking

• Docker networking - Objectives
• Container Network Model (CNM)
• CNM - Architecture
• Docker network drivers
• Bridge
• Host
• None
• Overlay
• MacVlan
• Ingress network

3. Container orchestration

• What is orchestration
• Docker Swarm
• Docker Swarm components
• Docker Swarm commands
• Docker Compose
• Installing Docker Compose
• Docker Compose vs. Docker Swarm
• Docker Compose file structure
• Basic Docker Compose commands

4. Docker security

• Docker Bench security audits
• Docker security tools
• The Update Framework
• Docker Notary
• Docker Content Trust
• Types of attacks

Guided practical exercises

• Docker Volume
• Docker Swarm
• Docker Compose
• Docker best practices
• Docker Bench security
• Docker Content Trust

Based on our hybrid eLearning methodology

Duration: 115 hours

Contains videos