My latest diversion may be of interest to any Concourse users here.
In a concourse pipeline, “tasks” are each run in separate containers, and a significant frustration is having to grant tasks privileged: true to be able to build a container image in your pipeline. This is where pkgs.dockerTools etc. have something to bring to the table.