Keyword

hardening

3 dispatches · latest 18 SEP 2026 · all keywords →

18 SEP 2026tutorials

Docker Socket Hardening: Stop Mounting Root-Equivalent Into Every Container

Your containers stop being a free elevator to the host — and you can prove it with one deliberate test. Audit the raw /var/run/docker.sock mounts, front them with Tecnativa's socket proxy (pinned v0.5.0), then userns-remap or rootless for structural isolation.

docker hardening socket-proxy

08 SEP 2026tutorials

SSH the Grown-Up Way: Certificate Auth, No Passwords, Revocable Access

Your servers trust one CA public key instead of a pile of authorized_keys files — and every credential expires on its own. OpenSSH has had this since 5.4; here's how to actually turn it on.

ssh openssh certificate-auth

26 AUG 2026tutorials

The 10-Minute Router Hygiene Drill (Nation-State Grade)

You don't need enterprise gear to close most of the gaps the FSB router advisory calls out. Here's a concrete checklist you can run on your home edge tonight.

tutorials hardening routers