Pin every package in your Dockerfile, or a routine apt-get install will bite you later

Hi Dev.to — I run CosmicIRC, a small, free, independent IRC network I host and maintain myself on a VPS. No company behind it, just a network I keep running because I like keeping it running.

Most of what I'll post here comes out of that: real incidents, the debugging that followed, and what I changed as a result — Docker layer caching quietly upgrading a dependency out from under me, a heap-corruption bug that never fully resolved, that kind of thing. Less "how to," more "here's exactly what happened and what I actually found."

Happy to be here — looking forward to reading what everyone else is building and breaking too.