Harbormaster is a basic extendable Docker Engine access authorization plugin that runs on directly on the host.
By default, Harbormaster plugin prevents from executing commands with certain parameters.
- Docker commands
- Pull images
- Start containers with specific parameters
--privileged
--ipc=host
--net=host
--pid=host
--userns=host
--uts=host
- any Linux capabilities with parameter
--cap-add=[]
- any devices added with parameter
--device=[]
- any dns servers added with parameter
--dns
- any ports added with parameter
--port
- any volumes mounted with parameter
-v
- any logging with parameters
--log-driver
and--log-opt
--sysctl
--security-opt
Supported Docker versions with HBM.
HBM Version | Docker Version | Docker API |
---|---|---|
0.19.x | 27.x | 1.47 |
We depend on the many great open source licenses, listed below:
- Docker types and client by Docker. View License
- Docker plugins helpers by Docker. View License
- Gorm by Jinzhu. View License
- Cobra by Steve Francia. View License