HackBlue

Labs / Container audit

What changed inside the running container

A web container is using far more CPU than usual. Use docker diff to list files added since it started, then docker top to see what is running from them.

  • Terminal mission
  • Beginner
  • 4 objectives
  • 0 of 4 solved

Briefing

The shop-web container on app-02 has been at 100% CPU since last night. Its image is built once and should never change at runtime.

docker diff lists files added (A), changed (C), or deleted (D) in a container compared with its image. docker top shows the processes inside it.

analyst@app-02

app-02 · Container audit

Type help for the command list and objectives for your tasks. Everything runs in this browser.

Up and down arrows walk your history. Ctrl+L clears the screen. Try help, ls, and objectives.