Docker Security — 安全加固与防护

Comprehensive guidance for securing Docker across the full lifecycle.

When to Use

ALWAYS use this skill when the user mentions:

• "docker 安全", "镜像安全", "container security"
• "非root运行", "rootless", "least privilege"
• "seccomp", "AppArmor", "SELinux"
• "Docker Bench", "CIS"
• "secrets management", "密钥管理"
• "image signing", "content trust"

Security Model — Layered Defense