How do you maintain build machine environments if not with docker? The CI script updates all the tools or something?
> (fragile?)
The Docker image isn't fragile, it's your software that risks becoming fragile if it's too strongly reliant on a specific environment.