It really depends on your problem. If you need to patch docker images it often gets hairy.