BU

Buildah

Build OCI container images without a daemon

Developer Tools & Git ★ 9.1k stars Medium setup Apache-2.0

Buildah is an open-source tool for building Open Container Initiative images from a Dockerfile or scriptable commands. It runs without a daemon and is well suited for self-hosted CI environments.

Key features

  • Daemonless image builds
  • Rootless support
  • Dockerfile compatible
  • Scriptable image creation

Strengths

  • Released under the Apache-2.0 license
  • Mature project with 9.1k GitHub stars
  • Written in Go
  • Tiny footprint — runs in 256 MB RAM

Is Buildah secure?

No known vulnerabilities affect Buildah's latest release (v1.45.2). OSV.dev lists 8 past advisories for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2026-44517, published 2026-08-21 (54 days ago), fixed in 1.43.2

Source: OSV.dev, checked 2026-10-14. How this is measured.

Buildah replaces

Health badge

Maintain Buildah? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 94 · excellent

Markdown
[![SelfHostIndex health score for Buildah](https://selfhostindex.com/badge/buildah.svg)](https://selfhostindex.com/app/buildah/)
HTML
<a href="https://selfhostindex.com/app/buildah/"><img src="https://selfhostindex.com/badge/buildah.svg" alt="SelfHostIndex health score for Buildah"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/buildah.svg
   :alt: SelfHostIndex health score for Buildah
   :target: https://selfhostindex.com/app/buildah/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Similar developer tools & git apps