This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/aRnonymousan on 2023-12-06 13:56:57.

So for the past couple of years i’ve been running a bunch of services with docker, and my default is to just put :latest behind everything.

But now the question is whether that’s good practice, this question applies for all the “supporting” images: Redis, Postgres, etc.While the main app, often has new features and fixes, so i will more actively want to update it.

Are there any real security risks to using an older version of postgres and updating maybe once a year? I feel like when a real vulnerabilities surface it is highlighted as big news.

*Bonus question, alpine version or not?