0300-docker-kernel-Check if the container server kernel version is 3.10 or higher¶

Rule ID¶

• 0300-docker-kernel

Category¶

• container

Level¶

• warn

Compatible Versions¶

• Linux

Description¶

• Docker in daemon mode has specific kernel requirements. The 3.10 Linux kernel is the minimum requirement for Docker.

Scan Frequency¶

• 1 */5 * * *

Rationale¶

• Kernels older than 3.10 lack some features required to run Docker containers. These older versions are known to have bugs that can cause data loss and frequent crashes in certain cases. Therefore, it is recommended to use the latest minor version (3.x.y) of the 3.10 (or newer maintenance version) Linux kernel. Additionally, using a newer Linux kernel ensures that previously discovered critical kernel bugs are fixed.

Risk Items¶

• Container Security

Audit Procedure¶

• Execute the following command to find the Linux kernel version:

uname -r

• Ensure the found kernel version is 3.10 or newer.

Remediation¶

• Review the Docker kernel and operating system requirements, and select your kernel and operating system accordingly.

Impact¶

• None

Default Value¶

• None

References¶

• check-kernel-dependencies
• installation-list

CIS Controls¶

• None