DevOps and Containers Security: Security and Monitoring in Docker Containers

Container security is more than a question of what runs inside an image. It also involves the host, deployment workflow, orchestration platform, network, and the tools used to monitor activity. DevOps and Containers Security brings those concerns together in a practical introduction to securing and operating Docker- and Kubernetes-based environments.

Jose Manuel Ortega Candel’s book moves from DevOps foundations into container platforms, image management, host and image security, vulnerability analysis, Kubernetes security, networking, monitoring, and administration. Its broad, operational view helps connect security decisions with the systems and workflows around them.

Follow security across the container lifecycle

The opening chapters establish DevOps concepts and introduce Docker, Kubernetes, Docker Swarm, and OpenShift. From there, the book looks at creating and managing images and containers, including Dockerfile practices and ways to reduce image size and attack surface. This progression gives readers context for understanding how build and deployment choices relate to security.

Examine images, hosts, and vulnerabilities

Security coverage ranges from container capabilities and privileged execution to host protections such as AppArmor and seccomp. The book also discusses auditing tools and image-scanning approaches, along with threats and vulnerabilities affecting Docker environments. These topics help readers consider more than a single security control: they show how image quality, host configuration, and vulnerability review fit into a wider defense effort.

Bring Kubernetes and operations into view

Kubernetes receives its own security chapter, including best practices and benchmark-based checks. Further chapters address Docker networking and port mapping, followed by container monitoring and administration. Tools discussed include cAdvisor and Sysdig Falco for monitoring, and Rancher and Portainer for administration.

Who may find it useful

This book is intended for developers and IT readers seeking a security-oriented introduction to Docker and related container platforms. The publisher recommends prior familiarity with UNIX commands and command-line work, making that a helpful starting point for readers following the operational examples.

For readers who want to connect DevOps practices with the day-to-day security and oversight of containerized systems, this book offers a structured route through the key platforms, risks, and management concerns.