As the pendulum swings back the other way I'm making some additional discoveries.
- docker leaves shit-loads of garbage around with no simple gc option
- rkt has a great gc option and because it's not a daemon there are few locked artifacts
- and my favorite is that rkt is now packaged with other distros
In particular I like NixOS as it offers a level of idempotent configuration/execute that no one else does.