3 ms·
I update my docker containers regularly but doing it in a reproducible, auditable, predictable way
by dev_l1x_be 6mo ago
I update my docker containers regularly but doing it in a reproducible, auditable, predictable way
- tom1337 6mo agoCould you explain how you achieve this?
- oefrha 6mo agoChainguard, Docker Inc’s DHI etc. There’s a whole industry for this.
- beart 6mo agoIf you are on github/gitlab, renovate bot is a good option for automating dependency updates via PRs while still maintaining pinned versions in your source.
- dev_l1x_be 5mo agohave a multi layer build system where there is version of each layer. Example - linux base: kernel + libc + some low tooling - jvm base: adding the JRE/JDK you need - your application version