There is no way to mark a base image as needing to be updated and update it.

[timthelion]

So if the "debian" base image is out of date, subuser never updates that image and never updates "everything" as it should.

[ruipin]

Isn't it possible to simply run docker pull and, if the image has been updated, rebuild the whole container? This check could be added to the subuser update command.

This page mentions how you can check if a base image is out-of-date. I assume something similar could be used.

Not an ideal solution, but I guess it would do? Better than running an out-of-date base image...

[timthelion]

I beleive that moving away from Docker (which really seems to need to happen due to performance and cleanliness problems) will resolve this issue.