[caasp-beta] Antw: Re: Antw: Re: Antw: Re: tcpdump

[Martin Weiss]

>>>> An other approach for all that debugging purposes could be to use a special
>>>> docker image / docker container that delivers all the trouble shooting tools
>>>> required and run that with proper elevated rights..
> 
> That is either complex, as the container has not all capabilities needed
> for proper debugging purposes, or a security nightmare, or most probably
> both.
> 

Yes - there is security and complexity assigned - but installing all the required debug packages on all the servers might be even worse from a security point of view and they might not be even part of the CaaSP delivery channels.
Advantage of a debug container is that it can be added on demand and cleanup is fully automated.. when installing all the debug packages these are a security problem while they are installed and the also need to be upgraded / patched etc.

So both ways have their pros and cons ;-)

Martin