File: rule.yml

package info (click to toggle)
scap-security-guide 0.1.76-1
  • links: PTS, VCS
  • area: main
  • in suites: trixie
  • size: 110,644 kB
  • sloc: xml: 241,883; sh: 73,777; python: 32,527; makefile: 27
file content (22 lines) | stat: -rw-r--r-- 946 bytes parent folder | download | duplicates (2)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
documentation_complete: true


title: 'Use direct-lvm with the Device Mapper Storage Driver'

description: |-
    To use Docker in production with the device mapper storage driver, the Docker
    daemon should be configured to use direct-lvm instead of loopback device as
    a storage. For setting up the LVM and configuring Docker, see the
    {{{ weblink(link="https://docs.docker.com/engine/userguide/storagedriver/device-mapper-driver/", text="Docker Device Mapper Storage Documentation") }}}.

rationale: |-
    For using Docker in production, the device mapper storage driver with loopback
    devices is discouraged. The suggested way of configuring device mapper storage
    driver is direct-lvm. Choosing the right storage driver and backing filesystem
    is crucial to stability and performance.

severity: low

platform: machine  # The check uses service_... extended definition, which doesnt support offline mode

platform: machine