tangentsoft/speedtest-cli repository overview

This is a single statically-linked binary of Ookla's speedtest-cli tool, set to give simple human-readable output by default, without any fancy progress meters, suitable for running automatically on containerized infrastructure rather than an interactive terminal.

It's tiny because there is only one executable inside this container; there isn't an "OS," not even a shell. This makes the container as secure as possible, having no greater attack surface than the service binary itself. If anyone ever does work out a way to exploit speedtest-cli, running it this way leaves the attacker without any additional tools to extend their reach. The only other file inside the container is the Mozilla CA cert.pem file from the Alpine project, to allow the speed test to go over HTTPS instead of HTTP.

Full details about the project are here⁠, including the Dockerfile and the Makefile used to build this container, plus instructions on getting it running under RouterOS 7, the initial testing target. It's since been tested under Docker and Podman, but given the bare-bones nature of the RouterOS container engine, this should run under any other sane engine.