nyxd is a Linux-native OCI orchestrator built on crun. Zero Docker. Zero containerd. Just a clean control plane you actually understand.
A focused feature set for operators who want predictable container orchestration on bare Linux hosts.
nyxd calls crun directly. No Docker daemon, no containerd shim, no unnecessary overhead on your host.
Read sectionNETWORKIn-process networkingNative bridge + IPAM + nftables NAT runs fully inside nyxd — no CNI binaries required unless you want them.
Read sectionCOMPOSECompose-compatible workflownyx compose up parses a Compose subset — services, env, mounts, depends_on, health checks — no Docker needed.
Read sectionSUPERVISORSupervisor + restart policiesnyxd supervises containers with configurable restart policies and reconciles state after an unclean shutdown.
Read sectionAPIREST control planeAll operations are available via a Unix-socket HTTP API fully documented as an OpenAPI 3 spec.
Read sectionSECURITYSecure by defaultNoNewPrivileges, minimal capabilities, masked /proc, per-container network namespace, digest verification on every pull.
Read sectionRead the install guide and have nyxd running in under five minutes on any capable Linux host.