Then you also have to auto-update the containers, if it's a public facing servic... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

exyi 3 months ago | parent | context | favorite | on: Blog ran on Ubuntu 16.04 for 10 years. I migrated ...

Then you also have to auto-update the containers, if it's a public facing service. Either you'll have to build containers yourself or hope the developer pushes a new update whenever the base image has relevant security fixes.

peanut-walrus 3 months ago [–]

Yup, podman quadlets autoupdate quite nicely. Setting up a local registry mirror with ~3d delay before applying updates is on my todo list.

My own service images already have a script that runs daily that pulls latest git updates and builds fresh images.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact