Securing the Container: Docker Best Practices

By default, many Docker containers run as root. This is a massive architectural flaw. We architect container workflows where services run with the least privilege necessary. If a container node is compromised, the attacker still doesn't have the keys to the host kingdom.