>but importantly, the image at each of these stages is exactly the same: reproducible at every turn
This is wrong. Hadn't read any further.
Regards,
NixOS adept
This is wrong. Hadn't read any further.
Regards,
NixOS adept
All jokes aside, to expand on this for others, you can fix a lot of dependencies but as soon as you start your dockerfile with a FROM, youre hiding a bunch of dependencies which you no longer control, behind that command. An example would be:
FROM tiangolo/uvicorn-gunicorn-fastapi
If tiangolo decides to update anything in the base image defined here, your build is now different to how it was before without really knowing