Lesson 1: Docker Architecture, Trust Boundaries, and Attack Surface

Lesson 1: Docker Architecture, Trust Boundaries, and Attack Surface

This lesson covers the main concepts and practical tasks for docker architecture, trust boundaries, and attack surface.

Topics Covered

• Docker components, daemon privileges, sockets, images, containers, registries, and host boundaries
• Container isolation, namespaces, capabilities, cgroups, and common security assumptions
• Threat actors, exposed services, insecure configuration, and container escape concepts
• Lab preparation, safe testing practices, and security validation workflow
• Mapping a Docker environment and identifying attack paths

Lesson Outcome

Learners complete the lesson with a practical understanding of the covered workflow and common troubleshooting steps.