/podman-pandoc

A demonstration of container hardening process

Primary LanguageDockerfile

podman-pandoc

A demonstration of container hardening process. Check Container Hardening Process at hardenedlinux.org for the instructions.

Files included

  • build/Dockerfile - for building a simple pandoc container for the demonstration.
  • demo/Makefile - contains commands to create and apply customized Seccomp profile using oci-seccomp-bpf-hook.
  • default.seccomp.json - the default Seccomp profile copied from /usr/share/containers/seccomp.json for reference.

Notes

  1. Podman is used in this demonstration as the container platform.
  2. cd demo/; make help to see how to use the commands.