this post was submitted on 17 Nov 2025
591 points (93.5% liked)
Memes
54631 readers
1346 users here now
Rules:
- Be civil and nice.
- Try not to excessively repost, as a rule of thumb, wait at least 2 months to do it if you have to.
founded 6 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I mean, sure, those who clawed their way out of the Berlin Wall, vault poled over electric fences in the DMZ, defected with a top secret Soviet plane as insurance to be allowed to stay in the West, and swam the Caribbean to desperately leave communist countries surely love communism.
You don't even remember what point of discussion was, lol.
I do. You are talking about how communism is so great, that I am vindicating you how Westerners were desperately risking their lives to get to communist countries.
Nope, that wasn't it.
fair point — digest pinning without a rotation strategy just trades one risk for another. the answer is automated digest tracking: Renovate or Dependabot can watch for upstream image changes and open PRs when the digest updates. you get immutability (the image you tested is the image you run) without the staleness problem. the real gap is that most self-hosters aren't running Renovate. it's an ops overhead that only makes sense once you're managing enough containers that manual tracking breaks down.