Hardening in Docker containers and Microservices-based Architectures

Hardening Course for Docker Containers and Microservices-based Architectures

Docker has become one of the most widely used standards for deploying modern container-based applications, while Kubernetes has positioned itself as the go-to platform for the orchestration and management of distributed workloads. These technologies enable the development of more agile, scalable infrastructures that are prepared for complex enterprise environments.

This Docker and Kubernetes course provides practical training focused on the secure implementation of microservices-based architectures. Participants will learn how to deploy, manage, and secure containers using tools widely adopted in DevOps and DevSecOps environments.

The training will cover Docker Swarm, Docker Compose, Docker Bench Security, Docker Notary, Docker Content Trust, and Kubernetes, applying best practices for hardening, access control, vulnerability analysis, and the protection of containerized applications.

This training is eligible for FUNDAE funding for companies and allows for the development of technical skills that are highly in demand for digital transformation, automation, and infrastructure modernization projects.

General Course Description

The course is designed for professionals working with container, microservice, Docker, and Kubernetes technologies who wish to consolidate their knowledge from a practical and security-oriented perspective.

Throughout the training, we cover the full cycle of creating, deploying, orchestrating, and protecting containerized applications. Participants will learn how to dockerize applications, implement solutions based on Docker Swarm and Kubernetes, design robust architectures, and apply security mechanisms in production environments.

In addition to the technological component, we will address fundamental concepts of DevSecOps, vulnerability analysis, container pentesting, and specialized tools to verify the integrity and security of images and deployments.

The methodology combines theoretical knowledge with guided practical exercises based on real-world work scenarios.

This training provides a practical and up-to-date view of container management, service orchestration, and security as applied to modern architectures based on Docker and Kubernetes. The program combines technical knowledge, operational best practices, and protection procedures for production environments.

What Nanfor courses include

At Nanfor, we offer a complete training experience that combines quality educational material, expert guidance, and our own learning platform, adapted for both individual and corporate training.

All of our courses include official and supplementary educational material, practical activities, learning assessments, forums, a virtual assistant, progress tracking, and personalized academic support throughout the training, as well as a certificate of completion.

Learn about all components

Advantages of training in Docker and Kubernetes

• Understand the principles of DevSecOps as applied to container environments.
• Learn to deploy and manage microservices-based architectures.
• Implement orchestration solutions using Docker Swarm and Kubernetes.
• Apply hardening techniques and security best practices.
• Perform vulnerability analysis and audits on containers and images.
• Manage scalable and resilient enterprise environments.
• Work with tools commonly used in real-world projects.

Technical Requirements

To successfully complete the course exercises, the following technical resources are recommended:

• Computer with a stable Internet connection.
• Updated web browser (Microsoft Edge, Google Chrome, Mozilla Firefox, or equivalent).
• Access to a Linux console or a command-line compatible environment.
• Permissions to install software or use virtualization tools when necessary.
• SSH client for connecting to remote practice environments.
• User account with sufficient permissions for carrying out labs and exercises.

Optional tool: your own virtual server to perform practices via SSH.

General course information

Who is this Docker and Kubernetes course for?

• System administrators.
• Application developers.
• IT professionals.
• Anyone who works with Docker and/or Kubernetes.
• IT professionals interested in deepening their knowledge of container and microservice technologies.

Training objectives: what will you learn?

• Understand the profile and responsibilities of DevSecOps.
• Create and manage different Docker networks.
• Implement microservices-based architectures.
• Deploy solutions using Docker Swarm.
• Manage applications using Docker Compose.
• Apply Docker Bench Security.
• Understand the TUF update framework.
• Use Docker Content Trust.
• Incorporate Docker and Kubernetes security best practices.
• Analyze vulnerabilities and strengthen the protection of containerized environments.

Course Content: Hardening for Docker Containers and Microservices-based Architectures – Syllabus

1. DevSecOPs

• What is DevSecOps
• From DevOps to DevSecOps
• DevSecOps implementations
• DevSecOps plan, Pillars, Governance
• DevSecOps success criteria
• DevSecOps profile
• DevSecOps tasks, tools, processes, and culture

2. Container Orchestration: What is orchestration?

• Docker Swarm
• Docker Swarm components
• Docker Swarm commands
• Docker Compose
• Installing Docker Compose
• Docker Compose vs Docker Swarm
• Docker Compose file structure
• Basic Docker Compose commands

3. Docker Security

• Docker Bench security audits
• Docker security tools
• The update framework
• Docker Notary
• Docker Content Trust
• Types of attacks
• Pentesting - Stages, types, technical report
• Docker Pentesting
• Docker image scanning
• Docker scanning tools: Snyk, Trivy
• Docker OWASP Container top 10
• Docker security rules

4. Kubernetes

• What is Kubernetes and why use Kubernetes?
• Kubernetes components - Pod, Service, Ingress, ConfigMap, Volume, Deployment, StatefulSet
• Cluster management - Manager Node, Worker Nodes, Global Services, Worker Services, Tasks, Ingress Load Balancing, Kubernetes high availability
• Kubernetes namespaces
• Kubernetes RBAC management
• Kubernetes networking
• Kubernetes - Access policy
• Kubernetes network policies
• Kubernetes analysis tools
• Azure Kubernetes Services

Guided practical exercises

• Docker Volume
• Docker Swarm
• Docker Compose
• Docker best practices
• Docker Bench security
• Docker Content Trust
• Docker Pentesting
• Docker and Kubernetes
• AKS implementation

Do you want to take this training? Request information now

If you want to take this course virtually, you can purchase it at the top of the product page. If you have any questions, please contact us.

If you want to take this course in a classroom or telepresence format, please contact us:

• Email: info@nanforiberica.com
• Phone: +34 91 031 66 78
• WhatsApp: +34 685 60 05 91

Why choose Nanfor as a specialized ICT training center?

Nanfor is a specialized ICT training center with extensive experience in technological training for professionals and companies. Our programs combine updated content, a practical approach, and expert guidance to facilitate the real-world application of knowledge in the workplace.

• Expert tutors with real-world experience in projects, technologies, and professional certifications.
• Personalized academic support throughout the training to monitor student progress.
• Practical methodologies based on real-world cases and scenarios applicable to the job position.
• Own learning platform with resources, activities, assessments, and continuous tracking.
• Training aligned with technological trends and the current needs of organizations.
• Flexible learning modalities: online, in-person, and telepresence.
• Experience in corporate training programs and digital talent development.

Frequently asked questions about the course

What is Docker and why is it used in enterprise environments?

Docker allows for the packaging of applications and dependencies within lightweight and portable containers. This facilitates consistent deployments, improves operational efficiency, and simplifies application management in different environments.

What is the purpose of Kubernetes in a microservices-based architecture?

Kubernetes automates the management, scaling, and availability of containerized applications, allowing for the efficient and secure management of high volumes of services.

What prior knowledge do I need to take this Docker and Kubernetes course?

Basic experience with Linux, command-line proficiency, and fundamental knowledge of Docker, including creating and running containers, are recommended.

Does it include Docker security content?

Yes. The program incorporates Docker Bench Security, Docker Notary, Docker Content Trust, image scanning, container pentesting, and hardening best practices.

Is this course eligible for FUNDAE funding?

Yes. The course can be taken through subsidized training for companies according to the available FUNDAE credits.

How long will I have access to the virtual campus?

Participants will have access for 3 months to consult materials and complete the training path.

Is it practically oriented?

Yes. The program includes guided exercises on Docker Swarm, Docker Compose, Kubernetes, AKS, and security tools commonly used in professional projects.