logoalt Hacker News

wannabe44today at 6:00 PM2 repliesview on HN

I always advocate having custom-built docker images for CI, periodically refreshed for security fixes. CI should not run more than few seconds over the standard time to run the same thing from a dev machine.

However, other people around me are fine with apt installs and pip installs from global mirrors in every CI run. So I may be just autistic.


Replies

hackerbrothertoday at 7:10 PM

Sure. Although you can expect build/test time to take a while on bigger projects, so I think it washes out a lot of the time.

pstuarttoday at 6:43 PM

Yeah, that drives me bonkers. Just set up a separate CI/CD for the images themselves that update daily as needed.