Docker has gotten a lot better imo since version 20.xx. buildx and buildkit are really nice now, and there's very little downside to having an up to date version (no important breaking changes, and improved rootless mode). Afaik the issue is related to some go packaging troubles or something.
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040417
Fwiw, I have never had any issues with docker on Ubuntu. Even on azureml, where VMs are by default provisioned only with Ubuntu+docker, it just really works.
Is there any actual security concern here? As far as I can tell, docker compose v1 has no outstanding CVEs, and has, in fact, never had any CVEs or needed/received any security updates.
Plus the Debian version has received some patches as recently as 2023: https://metadata.ftp-master.debian.org/changelogs//main/d/do...
It's just nice to have actual upstream bug fixes to an actually recent version instead of random backports and patches especially for a tool like docker. It's also nice to have the much improved tools of docker 20+.
Plus, you literally get everything that's nice from Debian too. It's like Debian but with a different package "profile". Debian is perfect for some use cases but Ubuntu is great for others.
This is a bit of a digression though, I don't actually have a problem with Ubuntu overall, I just found Debian to be better for my particular Docker-hosting needs.
https://docs.docker.com/engine/install/debian/#install-using...
Predictable release cycle is already worth it for server use and also for those who need commercial support.
And zfs is too good to miss and Ubuntu has supported it for very easy use for quite a while.
And it feels comfortable to use a distro who has corporate customers as they may lose substantial money if they're not careful.
Now speaking of corporate customers, well that is not a great argument, as even more users use Red Hat, which is IMO an inferior distro.
What is good about Debian, however there is a very little chance of it disappearing one day, or dramatically switching to snap-only or some other nonsense deviation. In a way, it is even safer for corporate use than Ubuntu. This is why it is used in Google (the used to run Ubuntu before on their workstations).