Containers Will Not Fix Your Broken Culture (and Other Hard Truths) (ACMQueue)

In ACMQueue magazine, Bridget Kromhout writes about containers and why they are not the solution to every problem. The article is subtitled:"Complex socio-technical systems are hard;film at 11.""Don't get me wrong-containers are delightful! But let's be real: we're unlikely to solve the vast majority of problems in a given organization via the judicious application of kernel features. If you have contention between your ops team and your dev team(s)-and maybe they're all facing off with some ill-considered DevOps silo inexplicably stuck between them-then cgroups and namespaces won't have a prayer of solving that.Development teams love the idea of shipping their dependencies bundled with their apps, imagining limitless portability. Someone in security is weeping for the unpatched CVEs, but feature velocity is so desirable that security's pleas go unheard. Platform operators are happy (well, less surly) knowing they can upgrade the underlying infrastructure without affecting the dependencies for any applications, until they realize the heavyweight app containers shipping a full operating system aren't being maintained at all."