docker
/
docs
mirror of https://github.com/docker/docs.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Initial blurb on engine signature verification

This commit is contained in:
Anne Henmi 2018-10-16 19:15:32 -06:00
parent b6c1aec3a8
commit 6e00f1eb82
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
engine/security/security.md
View File

@ -199,6 +199,13 @@ capability removal, or less secure through the addition of capabilities.
The best practice for users would be to remove all capabilities except
those explicitly required for their processes.
## Dockert Content Trust Signature Verification
The Docker Engine can be configured to only permitted to run signed
images. This is configured in the Dockerd configuration file. To
incorporate this, Docker will use trustpinning. Trustpinning means Docker
reposoitories with a known configured root key will only be accepted.
## Other kernel security features
Capabilities are just one of the many security features provided by