[burnt-resistor]

The limitations and gotchas of Docker containers are now well-known.

- Doesn't have the same resource isolation guarantees of quality type 1 hypervisors.

- Makes installation of cross-cutting concerns (monitoring and security agents) more difficult.

- Hand-waves away system administration.

- Challenges in assuring proper supply chain integrity.

But what it does is make infrastructure more accessible, repeatable, and standardized more simply than what came before, for better or worse. That's a giant dev UX win.

Them's called tradeoffs and choosing the right tool(s) in the toolbox for the particular purpose. Many of the concerns above can be mitigated with extra attention to detail.

[msgodel]

Mkdir solves 90% of the problems docker did and the other 10% were solved with chroot.