Unprivileged Containers - Shaving Yaks To Get the Toothpaste Back In the Tube

Explore the complex security challenges of implementing unprivileged containers in this 50-minute conference talk from the 44CON Information Security Conference. Delve into the intricate technical hurdles and creative solutions required when attempting to retrofit container security after deployment, examining the metaphorical "yak shaving" process of addressing seemingly endless prerequisite tasks. Learn about the fundamental security principles behind unprivileged containers, understand why retrofitting security measures is significantly more challenging than implementing them from the start, and discover practical approaches to container hardening. Gain insights into the trade-offs between functionality and security when working with existing containerized environments, and understand the systematic approach needed to gradually improve container security posture without breaking existing workflows.