You shouldn't need to wrap pulls with flock anymore, the pull code got completely rewritten and should be fine now. Also hosts shouldn't need to be rebuilt THA

You shouldn't need to wrap pulls with flock anymore, the pull code got completely rewritten and should be fine now. Also hosts shouldn't need to be rebuilt THAT often. Of course, your infrastructure should automatically nuke and replace failing hosts (and there's various ways to establish what's "failing"), and like any good infrastructure team you should be keeping your hosts up to date with security patches, etc, which is best done by replacing them with new versions (as then you can properly test and apply a CI lifecycle), but docker itself is stable enough these days that you don't need to be that aggressive with nuking. Agree (especially with the comments about orchestrating with kube/mesos) with all the other points, though.