Cis Docker V160 2.18
DevOps & Securitycis-docker-v160-2.18Cis Docker V160 2.18 is an Agent Skill for devops & security published in the CyberStrikeus/CyberStrike repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.
Ensure that experimental features are not implemented in production
How to use this skill
Bring this guide into your coding agent with a prompt tailored to the tool you use.
- Open your project in Codex.
- Copy and paste the prompt below.
- Review files and risks before approving any action.
Inspect the Agent Skill at https://github.com/CyberStrikeus/CyberStrike/blob/HEAD/.cyberstrike/skill/CIS_benchmarks/Server_Software/Docker/CIS_Docker_Benchmark_v1.6.0/cis-docker-v160-2.18/SKILL.md and all supporting files. Report provenance, permissions, scripts, dependencies, and security risks. Propose an exact installation into .agents/skills/cis-docker-v160-2-18, but wait for my approval before writing files or running scripts.
Copying this prompt does not install or run the skill. Review third-party files before use.
Ensure that experimental features are not implemented in production
Profile Applicability: Level 1 - Docker - Linux
Assessment Status: Manual
Description
Experimental features should not be enabled in production.
Rationale
"Experimental" is currently a runtime Docker daemon flag rather than being a feature of a separate build. Passing --experimental as a runtime flag to the docker daemon activates experimental features. Whilst "Experimental" is considered a stable release, it has a number of features which may not have been fully tested and do not guarantee API stability.
Impact
None
Audit Procedure
You should run the command below and ensure that the Experimental property is set to false in the Server section.
docker version --format '{{ .Server.Experimental }}'
Remediation
You should not pass --experimental as a runtime parameter to the Docker daemon on production systems.
Default Value
By default, experimental features are not activated in the Docker daemon.
References
CIS Controls
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 4.8 Uninstall or Disable Unnecessary Services on Enterprise Assets and SoftwareUninstall or disable unnecessary services on enterprise assets and software, such as an unused file sharing service, web application module, or service function. | ● | ● | |
| v7 | 18 Application Software SecurityApplication Software Security |
Profile/Assessment Status
Profile: Level 1 - Docker - Linux Assessment Status: Manual