Docker · hands-on lab

Docker Lab 14: Harden Containers (Users, Capabilities, Read-Only)

Run containers as non-root, drop Linux capabilities, use a read-only root file system, no-new-privileges and process limits.

Create an account to start Use or ask for a voucher

45 minutesTime in the lab
AdvancedLevel
6 tasksChecked automatically
CertificateVerifiable link when you finish

The situation

The security team audits your containers. Each one must run with the least privilege it needs.

What you will do

Guided exercise: Non-root user
Guided exercise: Drop capabilities
Guided exercise: Read-only root
Lab: Lock it down
Docker groupquestion
Content trustquestion

How it works

The lab opens in your browser: a real terminal or desktop, nothing to install. Work through the tasks, press Check after each one and the portal verifies your work. Stuck? Ask for a hint. Finish every task and you get a certificate page with its own verification link for LinkedIn or your CV.