Buildah vs Inclavare Containers

Buildah is a free command-line tool for building OCI container images on Linux. It can create images from working containers, Dockerfiles, or Containerfiles, and can also build through commands and scripts without a build file. Output can use OCI format or the traditional upstream Docker image format. Builds can run without root privileges, and Buildah follows a fork-exec model rather than running as a daemon. Its commands create, mount, unmount, delete, and rename working containers, as well as create or delete images; users can also pull images from a specified location and push local images elsewhere. Buildah is based on a Go API that other tools can vendor, and Podman uses it for Dockerfile builds while remaining independently installable. Buildah requires a kernel with OverlayFS or fuse-overlayfs support; RHEL or CentOS requires version 7.4 or later. Installation guidance warns that short image names can be spoofed and recommends fully qualified names from trusted registries or pulling by digest. The project points users to tutorials, releases, and a mailing list for questions.

Inclavare Containers is a free, open-source Linux container runtime for launching protected containers in hardware-assisted Trusted Execution Environments. It creates hardware-enforced isolation between a tenant workload and privileged cloud-provider software. Its Enclave Attestation Architecture provides remote attestation that sensitive workloads run on trusted TEE hardware. The rune component is described as compliant with the OCI Runtime specification, while documented integrations include dockerd, containerd, and pouchd. Deployment can use Occlum LibOS or WebAssembly Micro Runtime, and Rats-TLS provides an attested secured channel between heterogeneous TEEs. shim-rune handles enclave signing and management between containerd and rune; epm manages cache pools for enclave startup. The project is cloud-platform agnostic and can run on public-cloud Kubernetes platforms. It supports Kubernetes CRI, uses the OCI image format, and documents Linux hosts including Ubuntu 18.04 and Alibaba Linux 2. Installation is described through source builds or RPM/DEB repositories.