51% of 4M Docker images have critical vulnerabilities
No shit, a mechanism to bake pinned shared libs into a static archive to counter version dependencies on Ubuntu/Debian vs RedHat Linuxen grows stale, fossilized images? Who would've thought!As much as I love Docker for development, going all-in on containers for prod was a huge mistake. Which is becoming clearer now that RedHat pulls free CentOS images, after taking the so-called Linux community further and further away from POSIX and other portability means with systemd, namespaces, oci, and whatnot.