
Buildah
Podman
containerd
CRI-O
Crane
ZeroVM
BuildKit
LXD
Cachely.dev
nxCloud
Cachely is the managed self-hosted remote cache for Nx and Turborepo - the cache backend you'd otherwise build and run yourself, hosted for you on Cloudflare's edge (R2). It's a drop-in replacement for a DIY @nx/s3-cache / S3 bucket setup: point your build tool at Cachely with a token and two environment variables, and share build cache across CI and every developer's laptop.
Unlike a self-hosted cache, Cachely enforces read-only tokens at the API, so pull-request and fork builds can read but never write - closing the Nx cache-poisoning attack (CVE-2025-36852). It adds ROI reporting (the real build minutes and dollars the cache saved), per-tool insights, and build-optimization suggestions on top.
Pricing is a flat per-workspace subscription with no per-seat fees - add every developer, bot, and CI actor without watching the bill. Cachely never stores your source code; it caches only task outputs and their content hashes. Nx and Turborepo today; Bazel on the roadmap.
Buildah
Cachely.devNo Cachely.dev videos yet. You could help us improve this page by suggesting one.
Based on our record, Buildah seems to be more popular. It has been mentiond 14 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
Modern Docker releases use BuildKit, an efficient builder developed by Docker, whereas Podman uses Red Hat's Buildah. However, both solutions output OCI-compliant images, so there's no practical difference between the two for standard build workflows. - Source: dev.to / about 1 year ago
I suspect that the GP was really asking "why not use a different tool", like buildah , buildpacks , nix ,. - Source: Hacker News / over 1 year ago
Buildah specializes in building OCI-compliant container images, offering a more granular and secure approach to image creation compared to traditional Dockerfile builds. - Source: dev.to / over 1 year ago
Lockdown your Dockerized build environments --- Because privileged mode is insecure, you should restrict your CI/CD environments to known users and projects. If this isn't feasible, then instead of using Docker, you could try using a standalone image builder like Buildah to eliminate the risk. Alternatively, configuring rootless Docker-in-Docker can mitigate some --- but not all --- of the security concerns... - Source: dev.to / about 2 years ago
In my experience, not using docker to build docker images is a good idea. E.g. buildah[0] with chroot isolation can build images in a GitLab pipeline, where docker would fail. It can still use the same Dockerfile though. If you want to get rid of your Dockerfiles anyway, nix can also build docker images[1] with all the added benefits of nix (reproducibility, efficient building and caching, automatic layering,... - Source: Hacker News / almost 3 years ago
Podman - Simple debugging tool for pods and images
nxCloud - nxCloud is a commercial OwnCloud provider
containerd - An industry-standard container runtime with an emphasis on simplicity, robustness and portability
CRI-O - Lightweight Container Runtime for Kubernetes
Crane - Crane is a docker image builder to approach light-weight ML users who want to expand a container image with custom apt/conda/pip packages without writing any Dockerfile.
ZeroVM - ZeroVM is an open source virtualization technology that is based on the Chromium Native Client project.