1. It's not perfect if it's insecure. You really don't want to run your Docker images as root: https://pythonspeed.com/articles/root-capabilities-docker-securit

1. It's not perfect if it's insecure. You really don't want to run your Docker images as root: https://pythonspeed.com/articles/root-capabilities-docker-security/ https://pythonspeed.com/articles/root-capabilities-docker-se... 2. It's not perfect to include gcc; it's certainly OK, but it's possible to do better with multi-stage builds, as someone else commented. 3. You probably want PYTHONFAULTHANDLER=1 so segfaults gets tracebacks. Etc.. Going from "it works" to "it's production-ready" is quite a bit of effort!