Docker security: Risks and Best Practices

The Docker daemon generates and manages your Docker objects, such as images, containers, networks, and volumes. By default, the process inside a container is run as root (id=0) To enforce the principle of least privilege, you should set a default user. Testing should be a part of every development project that considers security.