Hacker News Reader

I'm fairly new to Docker. Do folks really rely on public images and registries for production systems? Seems like a brittle strategy.

View on HN

Yes, 1000s of orgs. Larger players might use a pull-through-cache - but it's not as common as it should be. Similar issue for other software-supply-chain (NPM, pyPi, etc)

Reply on news.ycombinator.com