Lesson 3: AppArmor, Seccomp, Content Trust, Secrets, and Hardening

Lesson 3: AppArmor, Seccomp, Content Trust, Secrets, and Hardening

This lesson covers the main concepts and practical tasks for apparmor, seccomp, content trust, secrets, and hardening.

Topics Covered

• Least privilege, rootless considerations, user namespaces, capabilities, and read-only controls
• AppArmor policies, Seccomp profiles, runtime restrictions, and protected host resources
• Docker Content Trust, image signing concepts, registry controls, and trusted delivery
• Secrets handling, patching, minimal images, secure defaults, and logging
• Applying layered container security controls

Lesson Outcome

Learners complete the lesson with a practical understanding of the covered workflow and common troubleshooting steps.