Ubuntu Process, Config Files and Docker Whistelisting

I have developed a Java Application using WildFLy 10 within a Docker Container. The Java application is accessed by remote users through any client browser via https. This application will be exposed to Internet. I have apply CIS benchmark to OS Ubuntu and Docker. In addition, in order to avoid unauthorized changes, I would like to apply whitelisting, I mean, I would like to digital sign or hash every process and config files and then the OS has to avoid to run any process with different hash or different digital signs. To do this, I will give you remote access to my development environment with all set and run. Deliverables 1.- Test environment with all process and config file hashed or digital signed. 2.- Documented process to reproduce the hashing or digital signing of all environment 3.- Some tool like SElinux, AppArmor, Secmod configured and running. 4.- Documented process to reproduce the installation of the tool 5.- Test the following cases: 5.1 change ssh config file, detect change and avoid ssh running 5.2 change java artifacts (WAR or EAR files) detect change and avoid to run the application 5.3 change wildfly, docker, binaries or config files, detect change and avoid to run the application 5.4 run any process not listen in the whistelist, detect the execution attemp and avoid to run this process 5.5 change /etc/shadow, detect the change and stop the application 6. Documented process to reproduce the configuration of the tool.