prydonius

Hi, I'm an engineer on the Bitnami team working on Stacksmith. If you’re already comfortable maintaining your image stack, keep writing Dockerfiles manually.

We don't think that the average Python developer should have to know apt, yum, apk, the packaging multi-verse, and bash just to get a secure environment where ‘pip install’ works reliably.

We created Stacksmith to help application developers keep their container images up-to-date with ease, without having to worry about the underlying stack too much, whilst still giving completely visibility into what's inside. This opens up the benefits of containers to a much wider audience of developers over time.

You are right it is difficult to keep self-managed installations secure vs. just using a SaaS provider, especially when some of the users only have basic admin skills. Having said that, we do our best to have secure settings by default, respond promptly to security issues (typically we release new images within hours of a new version being announced) and in particular in the case of WordPress we pre-configure everything out so automatic updates are enabled out of the box (which the user can also manage from the admin panel without touching the command line).

Hi Manish,

Our images do change some configuration options based on the type of instance that we detect on boot. It would be great if you could get in touch with us at [email protected] and let us know the details of what you had to configure manually, so that we can improve this.