SELinux is a kernel module that injects additional security-focused functionalities into the Linux kernel. Here's how you can install it on Ubuntu.
...
Containers are no more secure than physical machines. Find out how to scan your containers for vulnerabilities with the oscap-podman utility, available in Red Hat Enterprise Linux (RHEL) 8.2.
How to build a secure Docker image? The biggest goal of this article, is to be a comprehensive guide on building and delivering secure and safe container images.