Title. Mostly because of two flags: --read-only and --log-driver.

  • aksdb@feddit.de
    link
    fedilink
    arrow-up
    5
    arrow-down
    1
    ·
    1 year ago

    If the application in question doesn’t need to write anything, it also doesn’t write outside of docker, so it also won’t wear down the SD card.

    If the app has to write something, a fully read-only container will simply not work (the app will crash or fail otherwise).