Docker Secrets Reviews and Details

Social recommendations and mentions

• Deploy Django on a VPS with Docker: Step-by-Step Guide

  First, set up your environment variables. You can use Docker secrets or .env files to store sensitive data like database passwords. For a simple setup, create a .env file in the project directory on the server:. - Source: dev.to / 7 months ago

• Mastering Docker Compose: Advanced Patterns for On-Prem SaaS Deployments

  Tip: Restrict file permissions (chmod 600 db_password.txt) to prevent unauthorized access. Learn more in Docker’s secrets guide. - Source: dev.to / about 1 year ago

• Docker Secrets Management: Essential Practices for Container Security

  For more information, refer to the official Docker documentation on secrets. - Source: dev.to / over 1 year ago

• Lockdown Your Containers: 11 Docker Security Tips

  Storing sensitive information like passwords, API keys, and other secrets directly in your Dockerfile or Docker Compose file is a security risk. Instead, use Docker secrets for managing this sensitive data. - Source: dev.to / almost 2 years ago

• Does Your Startup Need Complex Cloud Infrastructure?

  Yes, swarm is not deprecated. I haven't used it myself yet, but I read elsewhere that swarm offers an easy way to manage secrets with containers. Some people run their 1 container in a swarm cluster with 1 node just for this feature. I see it's even officially suggested as a Note in the doc: > Docker secrets are only available to swarm services, not to standalone containers. To use this feature, *consider adapting... - Source: Hacker News / almost 2 years ago

• 5 Often-Ignored Docker Security Risks

  The solution is to keep your images clean of any sensitive data. Instead, use environment variables, Docker secrets, or dedicated secrets management tools to handle sensitive information. - Source: dev.to / almost 2 years ago

• Docker Secrets Best Practices: Protecting Sensitive Information in Containers

  Docker has revolutionized the way we build, ship, and run applications. However, when it comes to handling sensitive information like passwords, API keys, and certificates, proper security measures are crucial. Docker secrets provide a secure and convenient way to manage sensitive data within containers. - Source: dev.to / about 3 years ago

• Building my own app - design questions

  Are you using swarm mode? If so, you might want to consider using secrets. Source: over 3 years ago

• How to handle sensitive files?

  Have a look here https://docs.docker.com/engine/swarm/secrets/. Source: over 3 years ago

• Docker Secrets in Swarm

  To use a secret you have to map it during the creation of a service (in this case redis like in the documentation:. - Source: dev.to / almost 4 years ago

• How to manage secrets of my deployed services?

  Using docker secrets: This seems a no brainer, however, I haven't yet fully understood the documentation entry. For example, after reading this entry I still don't know if I can use docker secrets along with my strategy of having a separate .env file containing the environment variables (and the sensitive ones being handled by docker secrets). I have to enable swarm mode and I don't fully understand the... Source: almost 4 years ago

• How to work around Vercel's 4kb environment restriction

  Many platforms have sophisticated solutions for this, like AWS KMS and Docker Secrets. The idea is that these tools hold the secret in encrypted form and provides it to the application at runtime. - Source: dev.to / about 4 years ago

• Deploy .NET app to on-prem docker swarm, what is the best way to read docker secrets in order to use credentials to log on Azure KeyVault?

  Or you can use Docker Secrets (https://docs.docker.com/engine/swarm/secrets/), there are some unofficial (aka non-Microsoft) nuget packages to handle those, or you can create your own configuration manager, which more or less should do something like this (from https://www.jamessturtevant.com/posts/Acessing-Docker-Swarm-Secrets-From-ASPNET-Core/): ``` Public string GetSecretOrEnvVar(string key) { const string... Source: about 4 years ago

• Do you encrypt credentials in appsettings.json?

  Https://www.vaultproject.io/ or https://docs.docker.com/engine/swarm/secrets maybe? Source: over 4 years ago

• Is there any way to secure user authentication even for someone who has access to the DB?

  .env files are not secure because they are in plain text, it should be used for non sensitive config only. The secret manager should be the one injecting the environment variable. With Kubernetes, it is built in. Docker compose also have a secret manager you can use. When using a serverless service on Heroku, AWS, Google Cloud, Azure or any really they also have a sercret manager. What makes it secure is it is not... Source: over 4 years ago

• Fully Docker support Example Bot

  Creating secrets can be done in multiple ways and may differ depending on your OS. Make sure to read the Docker Documentation to find the best way on creating a secret in your situation. Source: over 4 years ago

• Real-world stories of how we’ve compromised CI/CD pipelines

  I'm considering manually storing a secret under some inaccessible directory on the host, e.g. `/root/passwords.txt`, then expose this via Docker secrets[1] to the container. Finally, in the entrypoint script, I'd set e.g. The user passwords of some SQL server, which is then run as a non-privileged user. Would that be reasonably safe? [1] https://docs.docker.com/engine/swarm/secrets/. - Source: Hacker News / over 4 years ago

• Docker-compose up error ERROR: for db Cannot create container for service db: invalid mode: /var/lib/postgresql/data

  # ------------------------------------------------------------------------------ # More resources related to this file: # [1] Overview | https://docs.docker.com/compose/ # [2] PostgreSQL | https://github.com/docker-library/docs/tree/master/postgres # [3] Node.js | https://github.com/nodejs/docker-node/blob/master/README.md#how-to-use-this-image # ------------- # More resources for your projects: # [4]... Source: over 4 years ago

• How to set PASSPHRASES in REDIS inside Dockerfile?

  Https://docs.docker.com/engine/swarm/secrets/ -- some other options here. The goal is to only have the secrets available to containers that have the right decryption keys, essentially. It's not a simple process but it is as secure as you can get. Source: almost 5 years ago

• Best Practice for Saving Email Password?

  Use a secrets manager, something like this: Https://docs.docker.com/engine/swarm/secrets/. Source: almost 5 years ago

• 2 Widespread Attacks on Your Containerized Environment and 7 Rules to Prevent it.

  Docker secret allows you to store your secrets outside of the image. - Source: dev.to / about 5 years ago