M_m_sahaf·Sep 12, 2019
You're looking for binctr: https://github.com/genuinetools/binctr
In Dissatisfied with Dockergenuinetools
binctr
Go2016–2019
genuinetools / binctr
binctr
Fully static, unprivileged, self-contained, containers as executable binaries.
8Distinct people
9Mentions
0Explicit recommenders
2.5KGitHub stars
What to know before exploring
What it is
Fully static, unprivileged, self-contained, containers as executable binaries.
GitHub
Where it is used
No documented product use has been verified yet.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 1:49:46 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year9 dated mentions
Observed mentions: 2016-04-18 07:54:32 UTC to 2019-09-12 02:31:38 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2016 | 2016-01-01 00:00:00 UTC | 2017-01-01 00:00:00 UTC | 2 | 2 | 0 |
| 2017 | 2017-01-01 00:00:00 UTC | 2018-01-01 00:00:00 UTC | 2 | 1 | 1 |
| 2018 | 2018-01-01 00:00:00 UTC | 2019-01-01 00:00:00 UTC | 3 | 1 | 2 |
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 2 | 1 | 1 |
What Hacker News says
9 sourcesFully static, unprivileged, self-contained, containers as executable binaries
117 points · Open discussionBinctr: Static, unprivileged, self-contained containers as executable binaries
294 points · Open discussionThis sounds like a much less general binctr [0].
I don't see how warp handles the most trivial case of a dynamically linked executable; I see no references to patchelf or other such tricks to ensure it looks within the application's cache directory for dynamically linked libraries, nor do I see any mount namespaces.
Does warp do that? Why would I use warp if it doesn't when there are more generic solutions that can handle such a case, namely binctr, docker, guix pack, nix....
[0]: https://github.com/genuinetools/binctr
In Warp – self-contained, single binary applications> I'n not sure about the reasoning, but it's probably a combo of "not trusting user namespaces" (disagree) and user namespaces requiring privileges to use.
binctr looks like an interesting solution to tackle this issue.
[1] https://blog.jessfraz.com/post/getting-towards-real-sandbox-...
[2] https://github.com/genuinetools/binctr
[3] https://news.ycombinator.com/item?id=18180276
In Flatpak – a security nightmareBinctr: static, unprivileged, self-contained, containers as executable binaries
3 points · Open discussionYou don't even need binfmt_misc. Jessie Frazelle wrote a PoC that did this by embedding the image and runtime into one static binary. https://github.com/jessfraz/binctr
In RailCar: Rust implementation of oci-runtimeFully static, unprivileged, containers as executable binaries
2 points · Open discussionBinctr: Static unprivileged self-contained containers as executable binaries
3 points · Open discussion