2015 Red Hat Government Symposium

1. Produced by
Containers and Security
Modernizing traditional IT and accelerating
new application delivery with containerization
Lars Herrmann
GM, Integrated Solutions Business Unit
Red Hat

2. Why Containers?

3. Development vs IT Operations

4. Top 5 Container Misperceptions
Containers are new.
Containers equal virtualization.
Containers are universally portable.
Containers are secure by default.
Containers are not enterprise-ready.
1
2
3
4
5

5. Containers are an OS technology

6. Containers deliver flexibility & agility
● Deploy applications faster
● Reduce efforts to deploy apps
● Streamline development
● Gain consistency between
dev/test/prod environments
● Lower deployment costs
● Reduce overhead

7. Containers provide consistency across
traditional and cloud-native workloads

8. Security is not a default configuration

9. What’s inside the container matters
● High vulnerabilities:
ShellShock (bash),
Heartbleed (OpenSSL), etc.
● Medium vulnerabilities:
Poodle (OpenSSL), etc.
● Low vulnerabilities: gcc:
array memory allocations
could cause integer overflow

10. Containers ARE ready for enterprise . . .
and government

11. Deep Container Inspection

12. The OS actually matters
● SELinux
● iptables/firewalld
● Linux Auditing System
● pam_tty_audit
● OpenSCAP
Security in RHEL that makes containers more secure:
● IdM / IPA
● Docker standard formats
● Control Groups (cgroups)
● Kernel namespaces
CONTAINER
ISOLATION WITH
SELINUX

13. Red Hat’s Container Solutions

14. Red Hat’s Container Benefits
Modernize Application Delivery
Standards and Automation
Gain Agility
Flexibility and Ownership
Achieve Consistency
Dev, Test, and Production
Deploy Anywhere
Baremetal, Virt, Private, Public

15. Produced by
Thank You