> But most importantly, all builds are completely reproducible.
This is only true if the commands that the recipe executes are reproducible. If someone's pulling packages from PyPi or C[PR]AN or ... w/out locking the versions, all bets are off.
This is one of my biggest beefs with many containerization sales pitches...
This is only true if the commands that the recipe executes are reproducible. If someone's pulling packages from PyPi or C[PR]AN or ... w/out locking the versions, all bets are off.
This is one of my biggest beefs with many containerization sales pitches...