Dobby Security Tool is a script based tool for checking security configurations of dobby container.
It is based on CIS_Docker_Benchmark_v1.3.1 standard and influenced from docker-bench-security.
The tests are automated for each dobby containers.
Running Dobby Security Tool
git clone https://github.com/DineshkumarJP/dobby-security-tool.git
cd dobby-security
./dobby_security.sh -c container_name
Ex: ./dobby_security.sh -c Netflix -v
-
Only run the test "5.10 - Ensure that the memory usage for containers is limited":
./dobby_security.sh -c Netflix -t test_5_10
-
Run all available test except the dobby_daemon_configuration group and "2.9 - Enable user namespace support":
./dobby_security.sh -c Netflix -e dobby_daemon_configuration,test_2_9
-
Run just the dobby_container_runtime tests except "5.9 - Ensure that the host's network namespace is not shared":
./dobby_security.sh -c Netflix -t dobby_container_runtime -e test_5_9
Options:
-c mandatory Container name (Ensure the container is running)
-e optional Comma delimited list of specific test(s) id to exclude
-h optional Print this help message
-t optional Comma delimited list of specific test(s) id
-v optional prints the additional prints
After excuted the script, you will get the output as test results summary.
