Developing, deploying, and using software securely is something which is important and whose importance only continues to grow with time. The question of whether there is anything else to be done to further enhance the security and robustness of ConfD deployments beyond features included with ConfD naturally arises.
The answer to this question is "yes". One important way in which this can be done is by leveraging security and sandboxing capabilities enabled by the standard Linux systemd service. We have written a new application note, "Securing and Sandboxing ConfD using Systemd", that describes how to do so using the systemd init daemon and namespaces to further enhance security and robustness of ConfD deployments .
Download this application note to learn how to use the systemd init daemon and namespaces features to further enhance security and robustness of ConfD deployments.
Sincerely,
John Lawitzke, ConfD Product Manager
