We use Docker everywhere. Every new service is built in Drone into a Docker image and pushed to our Dockerhub tagged with the git hash. We can then have full confidence we are deploying the exact version of any service. Docker