Automated updates are great until one is installed that is incompatible with what you actually want to run. Now it's 3 in the morning and you have to find an ol

Automated updates are great until one is installed that is incompatible with what you actually want to run. Now it's 3 in the morning and you have to find an old version of some package to fix your service. Obviously protection from this problem isn't something Kube alone provides but it's still a problem with the container-less setup you're describing. Flatpack could be an alternative. While we're on security - thinking simply installing your program via apt and running it in your VM is in any way compatible to containers in terms of the security benefit is simply wrong. In a container you'd getting filesystem isolation and capability restrictions OOTB. Via some program in apt you're going to have to deal with something like apparmor and a variety of other tools to get something even compatible to a Kube pod with default configs. > Basically docker replaces and improves upon what people used to do with VM images. This trivializes the feature set docker actually has.