> Repeatability is great, but who doesn't have that already?
In my experience: Pretty much nobody does fully repeatable builds. Most people have a hodgepodge of "mostly similar" OS images that sometimes get updated in production, possibly in contradictory ways.
You'll find the odd exception, but outside of large-ish companies they are few and far between, largely because while it certainly can be done, the toolchains people work with are cumbersome enough that for small teams it gets terribly tempting to e.g. "apt-get install" something on a live box rather than update their images and deploy.
> That's the whole point of package management.
Only if you disable it in production and only ever use the package management tools to update OS images.
In my experience: Pretty much nobody does fully repeatable builds. Most people have a hodgepodge of "mostly similar" OS images that sometimes get updated in production, possibly in contradictory ways.
You'll find the odd exception, but outside of large-ish companies they are few and far between, largely because while it certainly can be done, the toolchains people work with are cumbersome enough that for small teams it gets terribly tempting to e.g. "apt-get install" something on a live box rather than update their images and deploy.
> That's the whole point of package management.
Only if you disable it in production and only ever use the package management tools to update OS images.