Using the tag latest in Dockerfile's is non-deterministic based on the history of the docker host. Building an image today with :latest will pull the most recent version of a base image, but will not update that base image over time. If a new base is released in the Docker hub, building on an older machine that has pulled the previous version, and a new machine which will pull the new base, will be inconsistent and therefore error-prone in unanticipated ways.

We should develop a build procedure for containers that is reliable over time.