Intermediate
Docker & Containers
Q80 / 100
What is the effect of setting "read_only: true" for a service in docker-compose?
Correct! Well done.
Incorrect.
The correct answer is A) The container's root filesystem is mounted as read-only, preventing writes anywhere except explicitly mounted writable volumes/tmpfs
A
Correct Answer
The container's root filesystem is mounted as read-only, preventing writes anywhere except explicitly mounted writable volumes/tmpfs
Explanation
A read-only root filesystem prevents an application (or attacker) from writing to most of the container's filesystem, a hardening technique; applications needing to write temporary files must be given explicit writable volumes or tmpfs mounts.
Progress
80/100