Isolated build environments for everyone
Because agents aren't the only ones working. Build with your favorite partners and never worry about them going rogue.
Complete and total isolation
Sandbox in restrained microVMs to keep your day moving.
Total control over workflows
A personalized workspace that keeps environment parity.
Scale across every machine
Run your workload anywhere, from anything. We mean it.
Receipts for every environment
Verified provenance and CVE for all env dependencies.
[ What is Minimal? ]
The safest and most efficient way to create modern software.
Operate in reproducible sandboxes in libkrun microVMs. Everything your operation needs is defined in advance and travels across branches, forks, and worktrees.
A Trusted, Observable Supply Chain
Components are defined by Nickel-based build specs and built from source, in compliance with SLSA L3.
Infinitely Scalable Environments
Machine agnostic daemons build in reproducible, hermetically sealed sandboxes.
| Docker | nono | Minimal | |
|---|---|---|---|
| Rapid Invocation | partially supported | supported | supported |
| Stateful | supported | supported | supported |
| Durable | supported | supported | supported |
| Local-First | supported | supported | supported |
| Remote Execution | supported | not supported or not applicable | coming soon |
| Supply Chain Visibility | partially supported | partially supported | supported |
| Isolation Boundary | container / microVM | Landlock / Seatbelt | microVM / namespace |
[ Packages ]
Build with vetted, open source software
The best results have carefully curated inputs. Every item you and your agents need will have:
- Verified upstream sources
- SLSA Build L3 compliance
- CycloneDX v1.5 SBOMs with dependency graphs and PURLs
- Vulnerability Exploitability eXchange (VEX) suppression with expiry and EOL detection
[ Agentic AI ]
Trust your agents to work unsupervised
Maintain agentic velocity with enhanced security features, including:
- Defined agent policies for file system and network access
- Packages with 98% reproducibility, analyzed for vulnerabilities and updated regularly
- Durable runtime for long running tasks and round-the-clock coworkers
- Simplified security reporting and software provenance from updated vulnerability data
Agents can also read the package catalog through the hosted MCP server or the OpenAPI document.
WIP: Minimal for Teams!
Managed hermetic builds, org-wide policy enforcement, audit-ready attestation, and more!
[ Install ]
Install Minimal
Minimal is in public beta and available for local download on Linux and macOS.
Download Minimal v0.7.3:
curl --proto "=https" --tlsv1.2 -fsSL https://go.minimal.dev/stable | shpress 'c' to copy
[upstream]
repo = "https://github.com/gominimal/pkgs"
branch = "main"
[stack]
use = "rust"
[defaults]
state_key = "dev"
[session]
packages = ["base", "vim", "git"]FAQ
Have more questions? Ask us on Discord.
Yes. Minimal is open source, and it is in public beta and free to download for Linux and macOS. Minimal for Teams — managed hermetic builds, org-wide policy enforcement and audit-ready attestation — is coming soon.
Linux and macOS. On Linux, Minimal runs on x86-64 or ARM64 with a 5.10 or later kernel and unprivileged user namespaces enabled. On macOS it runs on Apple Silicon (M1 or later), where it boots a lightweight Linux microVM via libkrun on Apple's Hypervisor.framework; Intel Macs are not supported.
A Minimal session runs in a sandbox of its own rather than in a container — a lightweight Linux microVM on macOS, and on Linux either user and mount namespaces or that same microVM — and it is declared once in a minimal.toml that lives with your code and travels across branches, forks and worktrees. Sessions are stateful, with a native understanding of your Git worktree context, file patches and tool configurations. Every package inside is built from source in compliance with SLSA Build L3 and ships with a CycloneDX SBOM and VEX data, so the supply chain stays visible.
Everything that runs in a session runs in a sandbox, and nothing from your host leaks in unless you allow it. On macOS the session lives inside a lightweight Linux microVM booted by libkrun on Apple's Hypervisor.framework; on Linux the sandbox is built from unprivileged user and mount namespaces, and the same microVM backend is available with --provider local-minvmd. Agent policies define file system and network access.
Minimal supports most modern languages, such as C, C++, Rust, Python, Java, Go and JavaScript. Toolchains come from Minimal's package catalog, an expanding library of open source software in which every package is defined by a Nickel-based build spec and compiled from source in a hermetically sealed environment.