push

  • push over network
  • 🙂 containers
    • no long-lived identity
    • no local storage

pull

  • central machine reaches out to all known hosts
  • services write to local files

(src: Book: release it! - Michael Nygard)