/docs/latest/security/encryption/ Recent content in Encryption & Storage Security on Flatcar Container Linux Hugo en-us Copyright © The Flatcar Project Contributors. Copyright © Flatcar a Series of LF Projects, LLC. For website terms of use, trademark policy and other project policies please see <a href="https://lfprojects.org/policies/">lfprojects.org/policies</a>. /docs/latest/security/encryption/selinux/ Mon, 01 Jan 0001 00:00:00 +0000 /docs/latest/security/encryption/selinux/ <p>SELinux is a fine-grained access control mechanism integrated into Flatcar Container Linux and rkt. Each container runs in its own independent SELinux context, increasing isolation between containers and providing another layer of protection should a container be compromised.</p> <p>Flatcar Container Linux implements SELinux, but currently does not enforce SELinux protections by default. This allows deployers to verify container operation before enabling SELinux enforcement. This document covers the process of checking containers for SELinux policy compatibility, and switching SELinux into <code>enforcing</code> mode.</p> /docs/latest/security/encryption/luks/ Mon, 01 Jan 0001 00:00:00 +0000 /docs/latest/security/encryption/luks/ <p>Depending on where you run Flatcar Container Linux you might want to protect the data on disk against attackers that could pull out a hard disk or get access to a snapshot copy of it. Like a laptop, a server can use disk encryption to protect the contents. However, since there is no-one to type the password for unlocking, the unlocking has to happen automatically. It&rsquo;s hard to do this in a secure way that also protects against attackers with prolonged physical access to the system or similar modification capabilities.</p>