They let devs ssh onto production boxes and do what they want?!?! "Things diverge pretty quickly" - I'm sure they do. That sounds like a recipe for disaster... Docker looks promising but until there's a way to allocate maximum resources to a container I wouldn't use it in production. VMs are much slower to start but at least a runaway process on one won't affect other VMs on the same hardware. Docker only lets you hi…
It's fairly easy to integrate configuration management tools into your Docker workflow - I wrote a blog post about it here: http://kartar.net/2013/12/building-puppet-apps-inside-docker....