Charliecloud vs SCONE

Charliecloud is free, open-source container software for high-performance computing on Linux. It runs containers without privileged operations or daemons by using Linux user namespaces, with minimal configuration changes on computing-center resources. Users can build images, push and pull them to registries, and use accelerators such as GPUs. Its layer-free build cache is based on Git rather than union-mount filesystems and tarballs, and Dockerfiles are parsed with a formal grammar. The ch-image tool supports registry authentication and registries including GitLab Container Registry. At runtime, ch-run can inject host resources through the Container Device Interface, including NVIDIA GPUs and Cray networking. Installation is available from a release tarball, Git checkout, Spack, or Fedora/EPEL. Charliecloud requires Linux user namespaces and has been run on x86-64, ARM, and Power; current testing covers x86_64 and ARM. It is distributed under Apache License, Version 2.0. The project supports only the current release and provides no internal security boundary.

SCONE has no write-up on Specifiction yet; its figures are above.