Ensure aufs storage driver is not used

SrednjaNivo 1Automatskadocker

Opis

The aufs storage driver is deprecated, unsupported in current kernels and known to cause kernel crashes. The audit reads the storage driver from docker info.

Kako se proverava

Metod provere: Komanda ljuske

shell

d=$(docker info --format '{{.Driver}}') || exit 1; [ "$d" = aufs ] && echo "$d" || echo compliant

Očekivani izlaz: compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Migrate to the overlay2 storage driver: set "storage-driver": "overlay2" in /etc/docker/daemon.json, re-pull or rebuild images, and restart the Docker daemon.

Svojstva

Operativni sistemi: Bilo koji
Oznake: dockerdaemonstorage
Referenca: CIS Docker Benchmark v1.9.0 - 2.6 Ensure aufs storage driver is not used

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target docker