I installed OpenWrt on my mikrotik hap ac2 because I had problems streaming audio over wireless from my laptop to my raspberry.

I posted on mikrotik forums, even contacted support, all to no avail. Not what I expected from mikrotik and a device marketed as a "home router".

After installing openwrt, everything just worked as expected.

Support, as well as detailed, rigorous documentation in a technical writing style, are definitely lacking with Mikrotik products. There is a lot of assumed knowledge in the process of specifying and then purchasing from them. However the price, support and feature set are not too bad if you're able to determine ahead of time that it would all be suitable for your environment.

I did get very technical support in the forums, down to the level of tracking latencies and detailed package inspection. But that was way too low-level and over my head for something that worked out of the box on several previous OpenWRT installs on much weaker hardware.

I like the idea of Mikrotik and understand that they are pretty powerful for the price, but as you said, they require a certain level of experience and knowledge to wrangle them to the users liking.

So...disable the container feature?

Do you just not review the configuration of your networking equipment?

It is a convenient way to maximize hardware in SOHO deployments.

Edge equipment should not be multi-purpose, "maximizing hardware" or not.

This pursuit of saving money has given us weak boundaries that are relatively easy to cross, which will ultimately cost substantially more given any successful attack. The risk of an attack is an existential threat to the business itself. Do you really want to risk your entire business because you are trying to save a few hundred for a separate device?

There are places to try to save money and consolidate workloads, but edge routers are not it.

I was initially inclined to agree, especially since openwrt can run docker too, but I think it's fair to question both defaults and supported modes of operation, and how much work it is to go from the default to the desired target state. If out of the box openwrt has less attack surface and you have to go out of your way to add those features, that's probably better than a jack-of-all-trades that comes out of the box with loads of attack surface that you have to pare down and hope that removing the features you don't want is possible/supported.

RouterOS by default doesn't have container support. It's a separate package which has to be installed on the system. And it is still in testing / beta phase.

Oh boy, what you wanna do when you learn what there are switches there what have a complete PC in them, running Debian?

Eg: https://www.servethehome.com/dell-s5232f-on-hands-on-a-vastl...

Might want to stay away from the Turris routers, while openwrt based they also support running containers ;-)

Containers are an optional add-on package that is only present in the unstable release channel

... OpenWRT also can run containers.