So your haproxy, nginx, ldap, dns, nagios, sftp, ELK, imap, etc... services don't live more than a day or two? Interesting.....

When you run fully redundant services behind a load balancer, you don't need to worry about taking down one instance of a service for maintenance.

Good luck with your services that need to maintain state. Not everything is a stateless microservice.

Why not? It helps to think that containers are immutable. The actual data can be stored in either separate bare containers or on the host file system.

In this case the application containers themselves can perfectly live less than a day.

If they are containerized, no, they don't.

So you depend on every application company to update their containers for every library vulnerability that emerges that they embed? Good luck with that.

> their containers

Build your own images, problem solved. (Albeit creating a whole host of other problems in place of it, but those are no worse than a world without containers.)

No one relying on third party images beyond an OS can claim that they _really_ care about security or vulnerabilities anyway.

I build all of my own containers.