Hi,<p>Seccomp and user namespaces are in the Docker experimental build (<a href="https:&#x2F;&#x2F;docker.com&#x2F;experimental" rel="nofollow">https:&#x2F;&#x2F;docker.com&#x2F;experimental</a>) and should land in 1.10.<p>Docker 1.9 supports all other namespaces, cgroups, pivot_root, cap drop, selinux, apparmor, uid&#x2F;gid drop.<p>You can also sign and verify all images with a built-in Notary&#x2F;TUF implementation, and we partnered with Yubico to support hardware signing out of the box. I&#x27;m hoping we can make image signing the default in the near future, and make it mandatory within the year.<p>At this point I&#x27;m comfortable saying Docker&#x27;s security story is strong (although not perfect of course). But if you have specific suggestions for improvements we are interested!<p>EDIT I got it wrong userns is still experimental and will land in 1.10