[bootloop]

Just run it in LXC. Then the container is not immutable but the process will still be isolated with it's dependencies. And infrastructure as code, with Ansible etc, all possible.

Also the talk about docker being itself a dependency I can't really follow. I guess you would have many other dockers also running, otherwise being nxing the only thing within docker.. that doesn't make much sense..

[ebenes]

The section about the "Docker as an additional dependency" didn't transmit the message correctly which I tried to convey.

It is about:

Everything that something depends on makes it a little more likely to introduce failures which I want to minimize if reasonably possible.

I corrected the section.