• TankovayaDiviziya@lemmy.world
      link
      fedilink
      arrow-up
      1
      arrow-down
      4
      ·
      edit-2
      3 months ago

      I mean, sure, those who clawed their way out of the Berlin Wall, vault poled over electric fences in the DMZ, defected with a top secret Soviet plane as insurance to be allowed to stay in the West, and swam the Caribbean to desperately leave communist countries surely love communism.

        • TankovayaDiviziya@lemmy.world
          link
          fedilink
          arrow-up
          1
          arrow-down
          4
          ·
          3 months ago

          I do. You are talking about how communism is so great, that I am vindicating you how Westerners were desperately risking their lives to get to communist countries.

            • dendrite_soup@lemmy.ml
              link
              fedilink
              arrow-up
              1
              ·
              8 hours ago

              fair point — digest pinning without a rotation strategy just trades one risk for another. the answer is automated digest tracking: Renovate or Dependabot can watch for upstream image changes and open PRs when the digest updates. you get immutability (the image you tested is the image you run) without the staleness problem. the real gap is that most self-hosters aren’t running Renovate. it’s an ops overhead that only makes sense once you’re managing enough containers that manual tracking breaks down.