nix2container

Spec sheet

Purpose

Builds container images with Nix without writing tarballs to the Nix store.Read 4 Oct 2026 · github.com

Support

Commercial support is available for customizations, image optimizations, best-practices guidance, and bug fixes by contacting the maintainer.Read 4 Oct 2026 · github.com

License

The repository includes the Apache License, Version 2.0.Read 4 Oct 2026 · github.com

Architecture

The getting-started example selects the x86_64-linux system.Read 4 Oct 2026 · github.com

Base images

Can pull base images from a container registry by digest or from a supplied manifest file.Read 4 Oct 2026 · github.com

Image formats

The image configuration follows the OCI image specification.Read 4 Oct 2026 · github.com

Image loading

Examples show loading images into Docker and Podman.Read 4 Oct 2026 · github.com

Layer caching

Dedicated layers can isolate dependencies so unchanged layers need not be rebuilt or pushed.Read 4 Oct 2026 · github.com

Layer reuse

Can skip already pushed layers without rebuilding them.Read 4 Oct 2026 · github.com

Permissions

File permissions can be set when a tar layer is created without writing those permissions to the Nix store.Read 4 Oct 2026 · github.com

Registry authentication

The documentation describes configuring registry authentication for Nix daemon builds using Docker credentials and a Skopeo auth file.Read 4 Oct 2026 · github.com

Security setting

Image-pull functions default tlsVerify to true.Read 4 Oct 2026 · github.com

Testing limitation

The project documentation says its container tests do not run in the Nix sandbox because running a container there is currently not possible.Read 4 Oct 2026 · github.com

Plans and prices

Every nix2container plan and price →

Where Specifiction places it

• Container Build Tools#25 of 347.3