Excerpt from an IRC discussion earlier the day:

[08:14] <PlasmaFury> moritzm: yeah, but then there are a lot of official images too - so question is do we just allow them all (so that includes things like python, nodejs base images) or do we just allow debian base images
[08:14] <PlasmaFury> the python, nodejs etc ones also get security updates
[08:14] <PlasmaFury> from the official-images people (which we can join and make up to date too)
[08:17] <moritzm> I think starting with a single image is sufficient and let it grow on demand, if there's the need to provide additional vetted images we can add those on a case-by-case basis
[08:17] <PlasmaFury> ok!
[08:18] <PlasmaFury> moritzm: I guess we'll want to have it use our repos too?
[08:18] <PlasmaFury> instead of deb ones?
[08:19] <moritzm> PlasmaFury: I would say yes (especially since we provide some packages in $DISTRO-wikimedia which people might need like openjdk-8)
[08:20] <moritzm> and we're mirroring Debian anyway

https://github.com/wikimedia/operations-docker-images-debian is where it's at, btw.

I've now given up on writing my own thing and am using bootstrap-vz. bootstrap-vz doesn't support ubuntu environments, but I'll end up adding them at some point!.

Change 279443 had a related patch set uploaded (by Yuvipanda):
docker: Add a class that facilitates building base images

https://gerrit.wikimedia.org/r/279443

Change 279443 merged by Yuvipanda:
docker: Add a class that facilitates building base images

https://gerrit.wikimedia.org/r/279443