Dealing with OCI images and updating them

Perhaps worth looking at podman (and podman compose) then. Its OCI support is likely more mature and docker-compatible that incus’