Hacker News new | ask | show | jobs
by itamarst 2341 days ago
1. It's not perfect if it's insecure. You really don't want to run your Docker images as root: https://pythonspeed.com/articles/root-capabilities-docker-se...

2. It's not perfect to include gcc; it's certainly OK, but it's possible to do better with multi-stage builds, as someone else commented.

3. You probably want PYTHONFAULTHANDLER=1 so segfaults gets tracebacks.

Etc..

Going from "it works" to "it's production-ready" is quite a bit of effort!

1 comments

Thank you for all these suggestions, I've updated the article.

Your website is an excellent source of knowledge!