> One point that's not been addressed in your other replies is that Docker images should be a lot smaller than a "real" server so there should be fewer issues t

> One point that's not been addressed in your other replies is that Docker images should be a lot smaller than a "real" server so there should be fewer issues to patch. Could you quantify this? It's possible to strip down a "real" server much farther than even what distros' "minimal" packages specify, which is why I wonder just how much smaller "a lot smaller" really is. I commented on a short sub-thread [1] discussing dependency bloat/radii of distros. One commentor quantified it in bytes, though perhaps a more meaningful number in this context would be number of packages. [1] https://news.ycombinator.com/item?id=17345982 https://news.ycombinator.com/item?id=17345982