buildah

Operates without a running daemon using a fork-exec model, reducing attack surface and eliminating daemon-related overhead, as highlighted in the README's emphasis on simplicity and security.

Enables image building without root privileges, enhancing security in multi-user and CI/CD environments, which is a core feature mentioned in the description.

Supports building images from scratch or base images using CLI commands, allowing integration with bash or other scripting languages, as demonstrated in the lighttpd.sh example.

Provides commands to mount and unmount container root filesystems for precise layer manipulation, offering low-level control over image content.