2 ms·
The big problem with both Docker and Nix is that nobody is there to backport security fixes to older versions of libraries and applications.
by goodpoint 5y ago
The big problem with both Docker and Nix is that nobody is there to backport security fixes to older versions of libraries and applications.
- danieldk 5y agoThat's assuming that you start with images. If you start from Nix expressions, you could update your pinned version of the nixpkgs stable branch and rebuild the container image?
- takeda 5y agoActually that's not true. While docker's reproducibility is based on an image snapshot of a state. Nix reproducibility is really just a recipe how to build it. Because of that it's not really an issue. Yes, if you build a docker image through nix you have to regenerate it (which is easy) but that's how docker works.