@warp I think the rationale is that "the promise that docker images give you is that these containers will work without your intervention". But many general apt-get update && apt-get upgrade runs actually require manual intervention to finish safely.