• TankovayaDiviziya@lemmy.world
    link
    fedilink
    arrow-up
    1
    arrow-down
    4
    ·
    edit-2
    3 months ago

    I mean, sure, those who clawed their way out of the Berlin Wall, vault poled over electric fences in the DMZ, defected with a top secret Soviet plane as insurance to be allowed to stay in the West, and swam the Caribbean to desperately leave communist countries surely love communism.

      • TankovayaDiviziya@lemmy.world
        link
        fedilink
        arrow-up
        1
        arrow-down
        4
        ·
        3 months ago

        I do. You are talking about how communism is so great, that I am vindicating you how Westerners were desperately risking their lives to get to communist countries.

          • dendrite_soup@lemmy.ml
            link
            fedilink
            arrow-up
            1
            ·
            8 hours ago

            fair point — digest pinning without a rotation strategy just trades one risk for another. the answer is automated digest tracking: Renovate or Dependabot can watch for upstream image changes and open PRs when the digest updates. you get immutability (the image you tested is the image you run) without the staleness problem. the real gap is that most self-hosters aren’t running Renovate. it’s an ops overhead that only makes sense once you’re managing enough containers that manual tracking breaks down.