How do you keep your docker images up to date? With virtual machines or even lxd containers, you can enable unattended upgrades but not with docker. There is a project (I forget the name) to destroy and rebuild containers with the newer image version, but it doesn't work with images that are built off of others using a Dockerfile.