Home
Tamalerhino's Blog
Cancel

Install Docker Air Gapped

As part of a competition i am taking part of i needed the ability to run a simple self hosted wiki page on my Kali box. the fastest and best alternative was to run this as a container. Although i t...

Container Image Pipeline With SBOM

This is to go over a container image pipeline that will scan for vulnerabilities and generate a Software Bill of Materials at the end. Proposed Architecture graph TD A[Dev User Pushes Dockerf...

Systemd Namespace Containers

In my journey to demystify containers and get away from a product and run containers with nothing but my Linux laptop i decided that Containers From Scratch were great, but what if it was easier to...

Containers From Scratch Part 2

In the first part we created a container in the simplest form, using namespaces, chroot, and a little pivot_root magic to isolate our service. But there is still much more to do… Further Isolation...

Containers From Scratch Part 1

At the end of the day, all a container is an isolated service with its dependencies, this document will go over how to create a container from scratch, using nothing but the built-in Linux kernel m...

Bootstrapping Debian as a Container Image

In my research to get away from docker and docker images i needed a way to learn to create a conatiner image. After all a container image is just a filesystem that has been neatly packaged. In the ...

Creating A Custom WSL2 Image

Recently with the usage of Docker Desktop, there has been a need to use WSL2 to run Docker Desktop on Windows. However because of the various security implications, missing security kernel modules,...

How To Abuse Container Repositories For Fun And Profit

Often as security engineers we are worried about what vulnerabilites can be downloaded from container registries, howver i believe the same could be used to exfiltrate data. We will go over what a...

Docker Desktop WSL2 Deep Dive

In the last few years theres been a big push for Docker Desktop on developer workstations, many of those workstations being Mac and Windows not Linux. But since containers need a Linux kernel to ru...