Docker
TMA-DOCKER-2.19
Ensure that experimental features are not implemented in production
MediumLevel 1Automateddocker
Description
Experimental features are not stable and should not run in production. The audit reads Server.Experimental from docker version.
How it is checked
Audit method: Shell command
shell
docker version --format '{{.Server.Experimental}}'- Expected output
false
How it is fixed
Fix method: Guidance or infrastructure patch
Remove "experimental": true from /etc/docker/daemon.json and --experimental from the dockerd start-up flags, then restart the Docker daemon.
Properties
- Operating systems
- Any
- Tags
- dockerdaemon
- Reference
- CIS Docker Benchmark v1.9.0 - 2.19 Ensure that experimental features are not implemented in production
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target docker