Overview
This course delves into the comprehensive features of Mirantis Secure Registry (MSR), exploring its capabilities in bolstering container image security throughout the production, storage, and distribution phases. Whether utilized as a standalone registry or integrated into a continuous integration pipeline, participants will gain insights into installation, configuration, user permission management, security enhancements, and registry management strategies.
Objectives
By the end of this course, leaner will be able to:
- Understand the architecture of Mirantis Secure Registry (MSR).
- Deploy MSR using production-grade patterns.
- Configure MSR components within containerized environments.
- Implement access control and role-based access control (RBAC) in MSR.
- Utilize content trust mechanisms to enhance security.
Prerequisites
- Basic understanding of containerization concepts.
- Familiarity with system administration and operations.
- Proficiency in using Chrome or Firefox browsers.
- Access to a laptop with WiFi connectivity.
- Registration for a free account on strigo.io.
Course Outline
- Overview of container image security challenges.
- Introduction to MSR and its significance in enhancing security.
- Explanation of key concepts and terminology.
- Understanding MSR architecture and deployment patterns.
- Containerized components overview.
- Networking and system requirements.
- High availability deployment via Launchpad.
- Managing user permissions in MSR.
- Implementing Role-Based Access Control (RBAC) system.
- Utilizing content trust mechanisms.
- Defending against man-in-the-middle attacks with The Update Framework & Notary.
- Auditing container images for vulnerabilities.
- Setting up security scanning in MSR.
- Integrating security scans into continuous integration pipelines.
- Image pruning and garbage collection strategies.
- Registry sizing considerations.
- Implementing content caching for distributed teams.
- Automation of repository tasks.