Finch — Open Source Container Development by AWS

Introduction

Finch is an open-source container development tool created by AWS that bundles containerd, nerdctl, and BuildKit into a simple CLI experience. It provides a Docker-compatible command-line interface without requiring Docker Desktop, making it a lightweight and license-free alternative for building, running, and pushing container images on macOS and Linux.

What Finch Does

• Builds OCI container images using BuildKit with Docker-compatible syntax
• Runs containers locally with a CLI that mirrors Docker commands
• Manages a lightweight Lima-based virtual machine on macOS for Linux container execution
• Pushes and pulls images from any OCI-compliant registry
• Supports Docker Compose workflows via nerdctl compose

Architecture Overview

On macOS, Finch runs a lightweight Lima virtual machine with containerd as the container runtime. The finch CLI translates commands to nerdctl, which communicates with containerd inside the VM. BuildKit handles image builds. On Linux, Finch runs natively without a VM. This architecture means Finch uses the same container runtime as EKS and other production Kubernetes platforms, ensuring dev-prod parity.

Self-Hosting & Configuration

• Install via Homebrew on macOS or download binaries for Linux from GitHub releases
• Run finch vm init to create and start the backing virtual machine on macOS
• Configure VM resources (CPU, memory, disk) in ~/.finch/finch.yaml
• Set registry credentials using finch login for private image repositories
• Use finch compose up as a drop-in replacement for docker compose up

Key Features

• Docker-compatible CLI with no Docker Desktop license required
• Built on production-grade containerd runtime used by EKS and Fargate
• Lightweight Lima VM on macOS with configurable resources
• Full BuildKit support including multi-stage builds and build caching
• Native support for multi-platform image builds (amd64/arm64)

Comparison with Similar Tools

• Docker Desktop — feature-rich but requires a paid license for enterprise use
• Podman — daemonless container engine but different CLI behavior in some edge cases
• Rancher Desktop — includes Kubernetes but heavier resource footprint
• Colima — similar Lima-based approach but Finch bundles a more opinionated toolchain
• OrbStack — fast macOS containers but closed source and commercial

FAQ

Q: Is Finch a drop-in replacement for Docker? A: For most workflows yes. Finch supports the same build, run, and compose commands. Some Docker-specific features may differ.

Q: Does Finch work on Linux? A: Yes, Finch runs natively on Linux without a virtual machine.

Q: Can I use Finch with Kubernetes? A: Finch focuses on container development. For local Kubernetes, pair it with kind or minikube.

Q: Is Finch truly free for commercial use? A: Yes, Finch is Apache-2.0 licensed and free for all use cases including commercial development.

Sources

• https://github.com/runfinch/finch
• https://runfinch.com