0301-docker-lxc-notuse- Container must not use LXC execution driver¶
Rule ID¶
- 0301-docker-lxc-notuse
Category¶
- container
Level¶
- warn
Compatible Versions¶
- Linux
Description¶
- The default Docker execution driver is
libcontainer. LXC is an optional execution driver with only legacy support.
Scan Frequency¶
1 */5 * * *
Rationale¶
- Kernels older than 3.10 lack some features required to run Docker containers. These older versions are known to have bugs that can cause data loss and frequent crashes in some cases. Therefore, it is recommended to use the latest minor version (3.x.y) of the Linux kernel 3.10 (or newer maintenance releases). Additionally, using newer Linux kernels ensures that previously discovered critical kernel bugs are fixed.
Risk Item¶
- Container Security
Audit Method¶
- Run the following command to find the Linux kernel version:
Ensure the kernel version found is 3.10 or later.
Remediation¶
- Review the Docker kernel and operating system requirements, and select your kernel and OS accordingly.
Impact¶
- None
Default Value¶
- None
References¶
CIS Controls¶
- None