Building containers within a CI system, for example. CI jobs run as images, with a DinD service attached, which they can use to build images themselves.
But even if I run in a container e.g. a Github actions runner I can use buildah to build my image right? So no need for another container. Why is there another layer needed?