Use Case
Sensitive data lives on one machine, here server. Users connect to the server through a secure tunnel.
Multiple users connect to the server
Context
Available images on prd-ndoh-analytics01.za.p16n.org.
$ sudo docker info
Containers: 35
Running: 3
Paused: 0
Stopped: 32
Images: 49
Docker Root Dir: /var/lib/docker
Docker
Data management: By default all files created inside a container are stored on a writable container layer. There are three options for containers to store files in the host machine, so that the files are persisted even after the container stops:
- volumes: stored in a part of the host file system which is managed by Docker. A given volume can be mounted into multiple containers simultaneously. Volumes are the preferred way to persist data. Plus volumes can be encrypted among other things.
- bind mounts: stored anywhere on the host system. Security implications: ability to change the host file system via processes running in a container.
- tmpfs mount: stored in the host system’s memory only. Used by a container during the lifetime of the container, to store non-persistent state or sensitive information.
Technology Overview