Docker is an open-source technology that allows users to deploy applications to software containers. A Docker container is an instance of a Docker image, where the Docker image is the application, including the file system and runtime parameters.

You can use CentraSite Docker images from Docker Hub or create a Docker image from an installed and configured CentraSite instance and then run the Docker image as a Docker container. To facilitate running CentraSite in a Docker container, CentraSite provides a script to build a Docker image and then load or push the resulting Docker image to a Docker registry.

Support for CentraSite with Docker 18 and later is available on LINUX systems for which Docker provides native support.

For details on Docker and container technology, see Docker documentation.

Docker, by default, has introduced a number of security updates and features, which have made Docker easier to use in an enterprise. There are certain guidelines or best practices that apply to the following layers of the Docker technology stack, that an organization can look at:

For detailed guidelines on security best practices, see the official Docker Security documentation at https://docs.docker.com/engine/security/security/.

Docker has also developed Docker Bench, a script that can test containers and their hosts' security configurations against a set of best practices provided by the Center for Internet Security. For details, see https://github.com/docker/docker-bench-security.

For details on how to establish a secure configuration baseline for the Docker Engine, see Center for Information Security (CIS) Docker Benchmark (Docker CE 17.06).

For information on the potential security concerns associated with the use of containers and recommendations for addressing these concerns, see NIST SP 800 publication (Application Container Security Guide).

CentraSite Docker base image references the official UBI 8 ( https://developers.redhat.com/products/rhel/ubi/) image as its base image. Software AG is not responsible for the contents of this base image.