AI Decision System
Replayable, offline-verifiable records for AI-assisted go/no-go decisions: experiment promotions, typed model answers and human-approved actions.
Package a prebuilt dynamic Linux binary into a minimal, non-root FROM scratch OCI image — no Dockerfile, no static linking.
Developer toolsRust · ShellGitHub @schubydooOnlineOwner unconfirmed
Have you tried it? One tap is enough. No sign-in needed.
Daemonless supply-chain packager for prebuilt dynamic Linux binaries — a dynamic glibc ELF in, a minimal non-root FROM scratch OCI image out
Taken from the repository README
Loading the full README. The saved excerpt is shown below.
The daemonless supply-chain packager for prebuilt dynamic Linux binaries.
Point Scratchsmith at a dynamically linked glibc ELF binary and get a minimal FROM scratch
OCI image. You need no Dockerfile and no static-linking prerequisite. It resolves the binary's
shared libraries the way ld.so does (RPATH/RUNPATH/$ORIGIN, the interpreter, versioned
soname symlinks). It stages the glibc pieces nothing else remembers (NSS modules, a working
nsswitch.conf, minimal passwd/group). Then it assembles a non-root image with
reproducible layers.
Why not just static-link + FROM scratch?Read the full README ↗The full README is unavailable right now. Read it at the original link. The saved excerpt is shown below.
The daemonless supply-chain packager for prebuilt dynamic Linux binaries.
Point Scratchsmith at a dynamically linked glibc ELF binary and get a minimal FROM scratch
OCI image. You need no Dockerfile and no static-linking prerequisite. It resolves the binary's
shared libraries the way ld.so does (RPATH/RUNPATH/$ORIGIN, the interpreter, versioned
soname symlinks). It stages the glibc pieces nothing else remembers (NSS modules, a working
nsswitch.conf, minimal passwd/group). Then it assembles a non-root image with
reproducible layers.
Why not just static-link + FROM scratch?Read the full README ↗