2.18 Ensure that experimental features are not implemented in production

Information

Experimental features should not be enabled in production.

Rationale:

'Experimental' is currently a runtime Docker daemon flag rather than being a feature of a separate build. Passing --experimental as a runtime flag to the docker daemon activates experimental features. Whilst 'Experimental' is considered a stable release, it has a number of features which may not have been fully tested and do not guarantee API stability.

Impact:

None

Solution

You should not pass --experimental as a runtime parameter to the Docker daemon on production systems.

Default Value:

By default, experimental features are not activated in the Docker daemon.

See Also

https://workbench.cisecurity.org/files/4532

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|18

Plugin: Unix

Control ID: be2d554be3ca79b34349dc1c769042a2534f267cdebf7e4ff0b700709f6d38a6