[lima]

Plus, it does so non-reproducibly and downloads random binaries from the internet.

[lanstin]

Which makes rolling back a bad push really interesting. Give me a append only repo with my static binaries that my compute nodes deploy from. I even went to the trouble to put Python into RPMs for this.