the most common complaint i see people have with Docker is the quip "it works on my machine => i'll ship my machine" but this is literally the _least_ of the issues with Docker

every new thing i learn about Docker and container infrastructure as a whole is somehow more upsetting than the previous one. the entire thing is bad. OCI is bad. none of it is well-designed, most of it makes barely any sense at all, hardly any can be reasonably run at scale

@whitequark I predicted containers before they were cool. Doesn't mean I think they're a good idea though.

We all should have gone with Plan 9, at least as soon as it went FOSS, 25 years ago. Everything is in an isolated virtual environment all the time and there's no "real" privileged level underneath.