Ensure devicemapper storage driver is not used

SrednjaNivo 1Automatskadocker

Opis

The devicemapper storage driver is deprecated and has known performance and stability problems. The audit reads the storage driver from docker info.

Kako se proverava

Metod provere: Komanda ljuske

shell

d=$(docker info --format '{{.Driver}}') || exit 1; [ "$d" = devicemapper ] && echo "$d" || echo compliant

Očekivani izlaz: compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Migrate to the overlay2 storage driver ("storage-driver": "overlay2" in /etc/docker/daemon.json), re-pull or rebuild images and restart the Docker daemon.

Svojstva

Operativni sistemi: Bilo koji
Oznake: dockerdaemonstorage
Referenca: CIS Docker Benchmark v1.9.0 - 2.7 Ensure devicemapper storage driver is not used

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target docker