3 ms·
You know need to know how your server works, how docker works and how your application works. You are introducing another layer of complexity.
by rovr138 5y ago
You know need to know how your server works, how docker works and how your application works.
You are introducing another layer of complexity.
- denysvitali 5y agoBut you are getting the advantage of not upgrading a system library and break your Go application because it's not anymore up-to-date with the latest and greatest dependency. Unless you built it statically, that's another thing
- rovr138 5y agoOf course, but if you update your docker image, you're in the same boat. The solution shouldn't be don't install security updates. It should be having a workflow that tests and validates security updates before deploying them to production. And you should have this with or without docker.