4.6 Ensure HEALTHCHECK instructions have been added to the container image

Information

Add HEALTHCHECK instruction in your docker container images to perform the health check on running containers.
Rationale:
One of the important security triads is availability. Adding HEALTHCHECK instruction to your container image ensures that the docker engine periodically checks the running container instances against that instruction to ensure that the instances are still working.
Based on the reported health status, the docker engine could then exit non-working containers and instantiate new ones.
NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Follow Docker documentation and rebuild your container image with HEALTHCHECK instruction.
Impact:
None.
Default Value:
By default, HEALTHCHECK is not set.

See Also

https://workbench.cisecurity.org/files/1726

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CSCv6|18

Plugin: Unix

Control ID: e619336368ac45bece3da9485175d440a64f013ffb6b7f3d4ef1b038aeda154d