Docker
TMA-DOCKER-2.16
Ensure live restore is enabled for the Docker daemon
MediumLevel 2Automateddocker
Description
The live-restore option keeps containers running when the Docker daemon is stopped or restarted.
How it is checked
Audit method: Shell command
shell
docker info --format '{{.LiveRestoreEnabled}}'- Expected output
true
How it is fixed
Fix method: Guidance or infrastructure patch
echo 'Set "live-restore": true in /etc/docker/daemon.json and reload dockerd'
Properties
- Operating systems
- Any
- Tags
- dockercontainers
- Reference
- CIS Docker Benchmark v1.9.0 - 2.16 Ensure live restore is enabled
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target docker --level 2