Skip to content
/ hbm Public
forked from kassisol/hbm

HBM is an application to authorize and manage authorized Docker commands using Docker AuthZ plugin

License

Notifications You must be signed in to change notification settings

jonasbroms/hbm

 
 

Repository files navigation

HBM (Harbormaster)

Go Report Card MicroBadger

Harbormaster is a basic extendable Docker Engine access authorization plugin that runs on directly on the host.

By default, Harbormaster plugin prevents from executing commands with certain parameters.

  1. Docker commands
  2. Pull images
  3. Start containers with specific parameters
  • --privileged
  • --ipc=host
  • --net=host
  • --pid=host
  • --userns=host
  • --uts=host
  • any Linux capabilities with parameter --cap-add=[]
  • any devices added with parameter --device=[]
  • any dns servers added with parameter --dns
  • any ports added with parameter --port
  • any volumes mounted with parameter -v
  • any logging with parameters --log-driver and --log-opt
  • --sysctl
  • --security-opt

Versions

Supported Docker versions with HBM.

HBM Version Docker Version Docker API
0.2.x       1.12.x         1.24      
0.3.x       17.05.x       1.29    
0.5.x 17.06.x 1.30
0.5.x 17.09.x 1.32
>= 0.6.0 >= 1.12.x >= 1.24

Getting Started & Documentation

All documentation is available on the Harbormaster website.

User Feedback

Issues

If you have any problems with or questions about this application, please contact us through a GitHub issue.

About

HBM is an application to authorize and manage authorized Docker commands using Docker AuthZ plugin

Topics

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages

  • Go 88.4%
  • Shell 7.9%
  • Dockerfile 2.2%
  • Makefile 1.5%