Post #4396005

@alis@tech.lgbt @siblingsofthevoid@void.lgbt @ShadowJonathan@tech.lgbt I think that besides the larger attack surface that Docker creates and the long history of privilege escalation vulnerabilities in Docker. There is just the plain argument that it is really dumb to vendor lock your project into one particular type of deployment. I guess I hate when Docker is the only documented deployment choice as much as I hate applications relying on AWS S3 etc. It just removes the agency of the user to deploy it how they see fit. It also just isn’t that much work and good practice to document your environment variables and configurations properly.