Buildah
Podman
containerd
CRI-O
Crane
ZeroVM
BuildKit
LXD
LinuxKit
RancherOS
Hacker News Search
k3OS
Ottomatica slim
Packer
Talos Linux
Cockpit Project
Buildah
LinuxKitBuildah might be a bit more popular than LinuxKit. We know about 14 links to it since March 2021 and only 10 links to LinuxKit. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
Modern Docker releases use BuildKit, an efficient builder developed by Docker, whereas Podman uses Red Hat's Buildah. However, both solutions output OCI-compliant images, so there's no practical difference between the two for standard build workflows. - Source: dev.to / 12 months ago
I suspect that the GP was really asking "why not use a different tool", like buildah , buildpacks , nix ,. - Source: Hacker News / over 1 year ago
Buildah specializes in building OCI-compliant container images, offering a more granular and secure approach to image creation compared to traditional Dockerfile builds. - Source: dev.to / over 1 year ago
Lockdown your Dockerized build environments --- Because privileged mode is insecure, you should restrict your CI/CD environments to known users and projects. If this isn't feasible, then instead of using Docker, you could try using a standalone image builder like Buildah to eliminate the risk. Alternatively, configuring rootless Docker-in-Docker can mitigate some --- but not all --- of the security concerns... - Source: dev.to / about 2 years ago
In my experience, not using docker to build docker images is a good idea. E.g. buildah[0] with chroot isolation can build images in a GitLab pipeline, where docker would fail. It can still use the same Dockerfile though. If you want to get rid of your Dockerfiles anyway, nix can also build docker images[1] with all the added benefits of nix (reproducibility, efficient building and caching, automatic layering,... - Source: Hacker News / over 2 years ago
Funnily enough, we shipped the Docker Desktop VM a decade ago now (experience report at https://dl.acm.org/doi/10.1145/3747525). The embedded VM in DD is much more stripped down than the one in Claude Cowork (its based on https://github.com/linuxkit/linuxkit), and its more specialised to container workloads rather than just using bubblewrap for sandboxing (system services run in their own isolated namespaces).... - Source: Hacker News / 6 months ago
Note: Namespaces are a feature of the linux kernel. But Docker allows you to run containers on Windows and Mac... How does that work? The secret is that embedded in the Docker product or Docker engine is a linux subsystem. Docker open-sourced this linux subsystem to a new project: LinuxKit. Being able to run containers on many different platforms is one advantage of using the Docker tooling with containers. - Source: dev.to / almost 2 years ago
Another project that aims to deliver this is Linuxkit (https://github.com/linuxkit/linuxkit). All the components they ship are written in memory safe languages (usually Go) and run as containers under containerd. You can build a custom image very easily, fully defined as a YAML file. - Source: Hacker News / over 2 years ago
Docker-the-company maintained https://github.com/linuxkit/linuxkit. - Source: Hacker News / over 3 years ago
LF-Edge EVE project leverages Linuxkit to create custom OSs for Edge Devices which in turn leverages Containers as Lego Blocks. - Source: dev.to / almost 4 years ago
Podman - Simple debugging tool for pods and images
RancherOS - A simplified Linux distribution built from containers, for containers. Everything in RancherOS is managed by Docker, with minimum software needed to run Docker.
containerd - An industry-standard container runtime with an emphasis on simplicity, robustness and portability
Hacker News Search - a faster hnsearch
CRI-O - Lightweight Container Runtime for Kubernetes
k3OS - Purpose-built OS for Kubernetes, fully managed by Kubernetes.