I’m using RancherOS as docker hosting mechanism on Digital Ocean. If I understand correctly, RancherOS contains only the absolutely necessary parts as system docker containers. If so, I would expect that there isn’t much to do to harden RancherOS.
Is this true, or are there any steps I should take to harden a RancherOS instance that is publicly accessible?