Conversation

Notices

1. Santa Claes 🇸🇪🇭🇰🎅 (clacke@libranet.de)'s status on Friday, 17-Mar-2023 07:10:23 UTC Santa Claes 🇸🇪🇭🇰🎅

   in reply to

   • ocdtrekkie
   • Michał "rysiek" Woźniak · 🇺🇦
   @ocdtrekkie @rysiek Docker images should be reproduceable and you should have a safe copy of the source your release was built from, the whole stack.
   
   Current tooling doesn't make that easy and the current practice is pretty much the opposite.
   
   Docker *could* be something somewhat Guix/Nix-like if someone made it happen.
   • ocdtrekkie (ocdtrekkie@mastodon.social)'s status on Friday, 17-Mar-2023 07:10:24 UTC ocdtrekkie

     • Michał "rysiek" Woźniak · 🇺🇦

     @rysiek This is just another incident in a long line of examples why developers need to stop assuming some random third party repository (cough, npm, cough) will always serve whatever they need.

     If it's critical to you, you should have a local copy of it. Period.