mirror of https://github.com/docker/docs.git
ENGDOCS-1752 (#18514)
* ENGDOCS-1752 * fix link * fix title: * review edits
This commit is contained in:
parent
4971f200d5
commit
0aa2ccfe02
|
@ -57,7 +57,7 @@ For more information on how Enhanced Container Isolation work, see [How does it
|
||||||
|
|
||||||
>**Important**
|
>**Important**
|
||||||
>
|
>
|
||||||
>Enhanced Container Isolation does not protect Kubernetes pods. For more information on known limitations and workarounds, see [FAQs and known issues](faq.md).
|
>Enhanced Container Isolation does not protect Kubernetes pods. For more information on known limitations and workarounds, see [FAQs](../../../faq/security/eci-faq.md).
|
||||||
{ .important }
|
{ .important }
|
||||||
|
|
||||||
### What host OSes / platforms is Enhanced Container Isolation supported on?
|
### What host OSes / platforms is Enhanced Container Isolation supported on?
|
||||||
|
@ -85,7 +85,7 @@ To enable Enhanced Container Isolation as a developer:
|
||||||
|
|
||||||
>**Important**
|
>**Important**
|
||||||
>
|
>
|
||||||
>Enhanced Container Isolation does not protect containers created prior to enabling ECI. For more information on known limitations and workarounds, see [FAQs and known issues](faq.md).
|
>Enhanced Container Isolation does not protect containers created prior to enabling ECI. For more information on known limitations and workarounds, see [FAQs](../../../faq/security/eci-faq.md).
|
||||||
{ .important }
|
{ .important }
|
||||||
|
|
||||||
#### As an admin
|
#### As an admin
|
||||||
|
|
|
@ -20,7 +20,7 @@ When [Enhanced Container Isolation is enabled](index.md#how-do-i-enable-enhanced
|
||||||
created by users through `docker run` or `docker create` are automatically
|
created by users through `docker run` or `docker create` are automatically
|
||||||
launched using Sysbox instead of the standard OCI runc runtime. Users need not
|
launched using Sysbox instead of the standard OCI runc runtime. Users need not
|
||||||
do anything else and can continue to use containers as usual. For exceptions,
|
do anything else and can continue to use containers as usual. For exceptions,
|
||||||
see [FAQs and known issues](faq.md).
|
see [FAQs](../../../faq/security/eci-faq.md).
|
||||||
|
|
||||||
Even containers that use the insecure `--privileged` flag can now be run
|
Even containers that use the insecure `--privileged` flag can now be run
|
||||||
securely with Enhanced Container Isolation, such that they can no longer be used
|
securely with Enhanced Container Isolation, such that they can no longer be used
|
||||||
|
|
|
@ -3,6 +3,8 @@ title: FAQs
|
||||||
description: Frequently asked questions for Enhanced Container Isolation
|
description: Frequently asked questions for Enhanced Container Isolation
|
||||||
keywords: enhanced container isolation, security, faq, sysbox, Docker Desktop
|
keywords: enhanced container isolation, security, faq, sysbox, Docker Desktop
|
||||||
toc_max: 2
|
toc_max: 2
|
||||||
|
aliases:
|
||||||
|
- /desktop/hardened-desktop/enhanced-container-isolation/faq/
|
||||||
---
|
---
|
||||||
|
|
||||||
### Do I need to change the way I use Docker when Enhanced Container Isolation is switched on?
|
### Do I need to change the way I use Docker when Enhanced Container Isolation is switched on?
|
|
@ -0,0 +1,9 @@
|
||||||
|
---
|
||||||
|
description: Find the answers to common security related FAQs
|
||||||
|
keywords: Docker, Docker Hub, Docker Desktop secuirty FAQs, secuirty, platform
|
||||||
|
title: Security FAQs
|
||||||
|
---
|
||||||
|
|
||||||
|
## How does Docker Desktop handle and store authentication information?
|
||||||
|
|
||||||
|
Docker Desktop utilizes the host operating system's secure key management for handling and storing authentication tokens necessary for authenticating with image registries. On macOS, this is [Keychain](https://support.apple.com/guide/security/keychain-data-protection-secb0694df1a/web); on Windows, this is [Security and Identity API via Wincred](https://learn.microsoft.com/en-us/windows/win32/api/wincred/); and on Linux, this is [Pass](https://www.passwordstore.org/).
|
|
@ -52,6 +52,15 @@ grid_developers:
|
||||||
description: Learn how to use secrets in Docker Compose.
|
description: Learn how to use secrets in Docker Compose.
|
||||||
icon: privacy_tip
|
icon: privacy_tip
|
||||||
link: /compose/use-secrets/
|
link: /compose/use-secrets/
|
||||||
|
grid_resources:
|
||||||
|
- title: Security FAQs
|
||||||
|
description: Explore common security FAQs.
|
||||||
|
icon: help
|
||||||
|
link: /faq/security/general/
|
||||||
|
- title: Security best practices
|
||||||
|
description: Understand the steps you can take to improve the security of your container.
|
||||||
|
icon: category
|
||||||
|
link: /develop/security-best-practices/
|
||||||
---
|
---
|
||||||
|
|
||||||
Docker provides security guardrails for both administrators and developers.
|
Docker provides security guardrails for both administrators and developers.
|
||||||
|
@ -72,3 +81,7 @@ Explore the security features Docker offers to satisfy your company's security p
|
||||||
See how you can protect your local environments, infrastructure, and networks without impeding productivity.
|
See how you can protect your local environments, infrastructure, and networks without impeding productivity.
|
||||||
|
|
||||||
{{< grid grid_developers >}}
|
{{< grid grid_developers >}}
|
||||||
|
|
||||||
|
## Further resources
|
||||||
|
|
||||||
|
{{< grid grid_resources >}}
|
||||||
|
|
|
@ -1154,8 +1154,6 @@ Manuals:
|
||||||
title: How does it work?
|
title: How does it work?
|
||||||
- path: /desktop/hardened-desktop/enhanced-container-isolation/features-benefits/
|
- path: /desktop/hardened-desktop/enhanced-container-isolation/features-benefits/
|
||||||
title: Key features and benefits
|
title: Key features and benefits
|
||||||
- path: /desktop/hardened-desktop/enhanced-container-isolation/faq/
|
|
||||||
title: FAQs and known issues
|
|
||||||
- sectiontitle: Dev Environments (Beta)
|
- sectiontitle: Dev Environments (Beta)
|
||||||
section:
|
section:
|
||||||
- path: /desktop/dev-environments/
|
- path: /desktop/dev-environments/
|
||||||
|
@ -2218,3 +2216,9 @@ FAQ:
|
||||||
title: Manage users
|
title: Manage users
|
||||||
- path: /subscription/faq/
|
- path: /subscription/faq/
|
||||||
title: Subscription
|
title: Subscription
|
||||||
|
- sectiontitle: Security
|
||||||
|
section:
|
||||||
|
- path: /faq/security/general/
|
||||||
|
title: General
|
||||||
|
- path: /faq/security/eci-faq/
|
||||||
|
title: Enhanced Container Isolation
|
||||||
|
|
Loading…
Reference in New Issue