Project Battleship: How I Hardened 28 Docker Containers in a Single Day From a Fifth Wheel RV

Audit first. Change second. 22 of 28 containers locked down with cap_drop ALL, no-new-privileges, and resource limits. Zero downtime. One operator. Five AI instances. Cold beer.