hardening-docker-daemon-configuration

What problem does it solve?

This Skill helps you reduce the attack surface of the Docker daemon by hardening daemon.json and related security controls, preventing common privilege-escalation and container-breakout risks.

Core Features & Use Cases

• CIS-aligned daemon.json hardening: Applies key settings such as userns-remap, no-new-privileges, logging controls, and inter-container communication restrictions.
• Remote API protection with TLS: Generates CA/server/client certificates and configures tls, tlsverify, and certificate paths to secure TCP access.
• Security validation and auditing: Uses included Python audit scripts to check daemon configuration and Docker socket/file permissions against benchmark expectations.
• Operational hardening options: Covers rootless mode, seccomp/AppArmor guidance, content trust, and Docker Bench verification for ongoing compliance.

Quick Start

Use the hardening-docker-daemon-configuration Skill to audit your current Docker daemon configuration against CIS recommendations and output a remediation-ready hardening report.