juxt / docker Goto Github PK

I don't see much value in clojure/java base images, or to be more precise I see them pushed to a docker registry pointless.

For docker 'deliverables' I end up only depending on the disto-base (ubuntu:trusty in my case) and then everything else in-line in one dockerfile.

• The base image never has everything you'll need, so you always have to derive from it in a new Dockerfile.
• I don't want a 'base' to dictate java / lein versions. And overriding the base versions is just wrong.
• If you upgrade a base (due to security updates for instance) you still have to re-build all your downstream containers. If you have to rebuild them anyway, what is the point of the base.
• These bases are useless for building devbox-containers

Finally a word on funky ditros (arch, alpine). Sure, size is an issue but what trumps everything in my mind is reliable security updates. Docker images (in prod) have to be constantly 'apt-get upgrade'-d since they don't auto-upgrade/auto-relaunch services like say a ubuntu server. I just don't trust the smaller distros to promote security updates through (to legacy versions) like debian does.