No I mean why use Ansible and Puppet when you can create clean workloads from a docker image.

They said they’re using VMs over Docker for better security control

you can still export a container and run it as a vm with a bit of effort: https://blog.davidv.dev/docker-based-images-on-baremetal.htm...

Interesting! I haven't used VMs in a while due to being fully sucked into the world of Docker, but isn't VM configuration at the point you can do something similar to a Dockerfile to run? Or is it easier to go from Dockerfile -> VM?

Ah gotcha. Thanks. Missed that.