Nix Snapshotter – Native understanding of Nix packages for containerd
Hello! This is Edgar and Robbie and we built nix-snapshotter. nix-snapshotter brings native understanding of Nix packages to containerd. We built this because Nix is a great fit for making efficient containers. They don't need an OS because Nix captures all dependencies exactly. However, the current process of creating Nix images is subpar because one needs to transform Nix packages into a format that container runtimes understand. Using nix-snapshotter, instead of downloading image layers, packages come directly from the Nix store. Packages can be fetched from a binary cache or built on the…
In plain words
Nix Snapshotter is a containerd plugin that enables native support for Nix packages in container environments. Instead of converting Nix packages into standard container layers, it pulls packages directly from the Nix store, either from a binary cache or built on demand. The tool is designed for developers using Nix who want more efficient containers that eliminate unnecessary OS components while capturing exact dependencies. It supports mixed Nix and non-Nix layers and includes a Kubernetes image service for declarative container management.
written from the facts on this page · September 2026
From the sources
In the maker’s words, at launch
Hello! This is Edgar and Robbie and we built nix-snapshotter. nix-snapshotter brings native understanding of Nix packages to containerd. We built this because Nix is a great fit for making efficient containers. They don't need an OS because Nix captures all dependencies exactly. However, the current process of creating Nix images is subpar because one needs to transform Nix packages into a format that container runtimes understand. Using nix-snapshotter, instead of downloading image layers, packages come directly from the Nix store. Packages can be fetched from a binary cache or built on the fly if necessary. All existing non-Nix images continue to be supported, and Nix layers can be interleaved with normal layers. nix-snapshotter also provides a CRI image service, which allows Kubernetes to resolve image manifests from Nix directly too. This enables for the first time, fully declarative Kubernetes resources, all the way down to the image specification and its contents. With this, you can even run pure Nix images without a Docker Registry at all, if you wish. We'd love for you to try it out, there is a one-liner for Nix users to boot a VM with everything pre-configured: https://github.com/pdtpartners/nix-snapshotter
Does the same job
all alternatives →- NANucleus – A security-hardened, Nix-native container runtimeJun 2026 · github.com · ▲40
Hi HN, I've been building Nucleus, a lightweight Linux container runtime focused on two workloads: ephemeral AI-agent sandboxes and declarative NixOS services. It's a single Rust binary, no daemon. It is not a Docker replacement and not a strict subset of Docker either. I dropped the entire image-and-distribution half (no Dockerfile, no layers, no registry, no pull/push, no persistent storage layer) in exchange for going deeper on isolation and reproducibility. The rootfs is either a directory copied into tmpfs (agent mode) or a Nix-built closure mounted read-only (production mode). If…
- GFGlobset for Nix Source Filtering2024 · github.com · ▲7
Hi there! I am Edgar and I wanted to share with you “globset”, a Nix library to help specify what sources to include when building a Nix package using familiar glob patterns like “*/*.go”. Nix is package manager and meta build system, in that you glue together compilers and other build systems in repeatable sandboxes like “docker build”. When specifying the source inputs to a Nix package, you typically end up with irrelevant files that when changed causes a rebuild unnecessarily. “globset” provides a concise and simple way of specifying what sources should be included. It is built on…
Kern – container and resource runtime in a 1.5 MB binary, no daemon13d ago · github.com · ▲70A fast, rootless sandbox and virtual resource runtime for any workload, including untrusted and AI-generated code. Daemonless: a real, kernel-enforced container in ~3.5 ms from an OCI image, out of one static binary - getkern/kern
- IVI've built a nice home server OSApr 2026 · lightwhale.asklandd.dk · ▲194
ohai! I've released Lightwhale 3, which is possibly the easiest way to self-host Docker containers. It's a free, immutable Linux system purpose-built to live-boot straight into a working Docker Engine, thereby shortcutting the need for installation, configuration, and maintenance. Its simple design makes it easy to learn, and its low memory footprint should make it especially attractive during these times of RAMageddon. If this has piqued your interest, do check it out, along with its easy-to-follow Getting Started guide. In any event, have a nice day! =)
- NNNixar – New design of Linux command line2015 · nixar.work · ▲130
More commerce this month
the category →
Compare your startup equity grant for free.
Commerce · 26d ago · equitybee.com
