Finch
What it is
Finch is a free, open-source tool for local container development on macOS, Windows, and Linux. It provides a native client for upstream container projects by combining Lima, nerdctl, containerd, and BuildKit. Its command-line interface works with Docker Compose commands, so existing Compose workflows can be translated to Finch commands. Finch supports most Visual Studio Code Dev Container use cases and offers OCI support, resource controls, and a hybrid runtime mode. Developers can sign and verify container images with cosign using self-managed keys. The project originated with Amazon Web Services and was released in November 2022. Finch is intended for development rather than production, particularly multi-tenant workloads. On macOS, registry credentials use the encrypted Keychain by default. Windows installation requires WSL 2 and administrative privileges; macOS installation also requires administrative privileges, while Linux requires kernel v4.x or later.
For and against
For
- Free and open source
- Works on macOS, Windows, and Linux
- Docker Compose-compatible CLI
- Supports most VS Code Dev Containers
- Cosign image signing and verification
Against
- Not intended for production workloads
- macOS and Windows VMs lack security boundaries
- Rootless mode is not supported
- Windows requires WSL 2 and administrator access
The verdict
Finch combines several container components into a cross-platform local development tool.
Who it suits
Finch suits developers who need an open-source local container runtime across macOS, Windows, or Linux. It also fits workflows using Docker Compose or Visual Studio Code Dev Containers.
Plans and prices
Finch
No licensing tiers or commercial agreements required
Read 7 Oct 2026 · runfinch.com
On the record
- Compose
- Finch provides a CLI compatible with Docker Compose commands, so commands such as `docker compose up` can be translated to `finch compose up`.runfinch.com · read 7 Oct 2026
- Core components
- Finch brings together Lima, nerdctl, containerd, and BuildKit.runfinch.com · read 7 Oct 2026
- Credential storage
- On macOS, Finch configures the encrypted macOS Keychain by default for registry credentials; it does not support Windows `wincred` or Linux `secretservice` system stores.runfinch.com · read 7 Oct 2026
- Dev Containers
- Finch supports a majority of Visual Studio Code Dev Container use cases as an open source container runtime solution.runfinch.com · read 7 Oct 2026
- Image signing
- Finch supports signing and verifying container images with cosign, and currently supports self-managed keys.runfinch.com · read 7 Oct 2026
- Linux prerequisite
- The Linux installation guide lists Linux kernel v4.x+ as a prerequisite.runfinch.com · read 7 Oct 2026
- macOS prerequisites
- Finch on macOS requires administrative privileges to install and recommends at least 2 vCPU and 4 GB of memory.runfinch.com · read 7 Oct 2026
- Project origin
- Finch is an open source project originally released by Amazon Web Services in November 2022.runfinch.com · read 7 Oct 2026
- Purpose
- Finch is an open source tool for local container development that provides a native client for upstream container projects.runfinch.com · read 7 Oct 2026
- Security limitation
- Finch is a developer tool not meant for production use, especially multi-tenant workloads, and its macOS and Windows virtual machine does not create a security boundary.runfinch.com · read 7 Oct 2026
- Support
- Users can report issues through the Finch GitHub repository, and AWS customers with Developer tier or higher support can open technical support tickets for Finch.runfinch.com · read 7 Oct 2026
- Supported platforms
- Finch is available for developers on macOS, Windows, and Linux.runfinch.com · read 7 Oct 2026
- Windows prerequisites
- Finch on Windows requires WSL 2 and administrative privileges to install.runfinch.com · read 7 Oct 2026
