[caasp-beta] Antw: Re: Antw: Re: Antw: Re: tcpdump
Martin.Weiss at suse.com
Thu Dec 7 07:56:17 MST 2017
>>>> An other approach for all that debugging purposes could be to use a special
>>>> docker image / docker container that delivers all the trouble shooting tools
>>>> required and run that with proper elevated rights..
> That is either complex, as the container has not all capabilities needed
> for proper debugging purposes, or a security nightmare, or most probably
Yes - there is security and complexity assigned - but installing all the required debug packages on all the servers might be even worse from a security point of view and they might not be even part of the CaaSP delivery channels.
Advantage of a debug container is that it can be added on demand and cleanup is fully automated.. when installing all the debug packages these are a security problem while they are installed and the also need to be upgraded / patched etc.
So both ways have their pros and cons ;-)
More information about the caasp-beta