Without docker also: * have a production outage because your libc was updated and now your go apps (which are dynlinked against it by default) won’t start * m

Without docker also: * have a production outage because your libc was updated and now your go apps (which are dynlinked against it by default) won’t start * mess around with low level cgroup settings if you need to oversubscribe safely * cry in a corner the second you also need some python libs installed to do some machine learning or opencv or whatever on the side