How does Silverblue handle the real world, where does it fail? Nix was the fight concept a decade a go I'm a amazed that it has come so far. Packaging is soo hard atm, the question for me is always how can I get this system to build cleanly with the least amount of work (now and in the future). This is not something docker solved completly, but almost (tracking vulns in base docker images sucks, and using external DBs to track supply lines and what is running on all hosts is not how it should be done)