ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 142 - DCA discussion

Report
Export

Will this Linux kernel facility limit a Docker container's access to host resources, such as CPU or memory?

Solution. capabilities

A.

Yes

Answers
A.

Yes

B.

No

Answers
B.

No

Suggested answer: A

Explanation:

Capabilities are a Linux kernel feature that allows processes to perform some privileged operations without having the full power of the root user1.Docker uses capabilities to limit the access of containers to host resources, such as CPU or memory2.By default, Docker drops all capabilities except those needed for the container to function properly, using a whitelist approach3. This reduces the risk of a container compromising the host system or other containers.You can also add or remove capabilities to or from a container at runtime, using the--cap-addor--cap-dropoptions of thedocker runcommand4. This gives you more control over the security and functionality of your containers.Reference:

Capabilities | dockerlabs

Docker run reference | Docker Docs

Docker Capabilities and no-new-privileges

Runtime privilege and Linux capabilities | Docker Docs

asked 08/11/2024
Krishan Randitha
42 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first