Container images should include HEALTHCHECK instructions
이 페이지는 아직 영어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우
언제든지 연락주시기 바랍니다.Description
You should add the HEALTHCHECK instruction to your Docker container images in order to ensure that health checks are executed against running containers.
Rationale
An important security control is that of availability. Adding the HEALTHCHECK instruction to your container image ensures that the Docker engine periodically checks the running container instances against that instruction to ensure that containers are still operational. Based on the results of the health check, the Docker engine could terminate containers which are not responding correctly, and instantiate new ones.
Audit
Run this command to ensure that Docker images have the appropriate HEALTHCHECK instruction configured: docker inspect --format='{{ .Config.Healthcheck }}' <IMAGE>
You should follow the Docker documentation and rebuild your container images to include the HEALTHCHECK instruction.
Impact
None
Default value
By default, HEALTHCHECK is not set.
References
- https://docs.docker.com/engine/reference/builder/#healthcheck
CIS controls
Version 6
18 Application Software Security Application Software Security
