Hacker News Reader

> How does Kubernetes, microservices and front end frameworks fix that?

Doesn't being in a container mean its much easier to rebuild it from zero and thus allowing security updates to be more regular?

Not really. A "container" is usually just an instance of a Linux distribution, and the work involved in updating it is roughly the same.

In the 27 minutes after you wrote your comment, our CI/CD rebuild two containers from a latest snapshot. No manual work involved.

Good for you, some people can do automatic unattended OS updates too.

There's no benefit to using containers here, only more pain.

One benefit of containers is easy rollback.

IME, this is rarely true; hence “2hrs fixing docker build”.

It’s really difficult to pin everything. Even if you manage that, upstream resources change/move.