nyxd is a Linux-native OCI orchestrator built on crun. Zero Docker. Zero containerd. Just a clean control plane you actually understand.
A focused feature set for operators who want predictable container orchestration on bare Linux hosts.
nyxd calls crun directly. No Docker daemon, no containerd shim, no unnecessary overhead on your host.
Read sectionNETWORKIn-process networkingNative bridge + IPAM + nftables NAT runs fully inside nyxd — no CNI binaries required unless you want them.
Read sectionCOMPOSECompose-compatible workflownyx compose up parses a Compose subset — services, env, mounts, depends_on, health checks — no Docker needed.
Read sectionSUPERVISORSupervisor + restart policiesRestart policies with backoff, health checks, and containers that keep running and are re-adopted when the daemon crashes or restarts.
Read sectionAPIREST control planeEvery operation is on a Unix-socket HTTP API, documented as OpenAPI 3 and kept compatible for all of 1.x.
Read sectionSECURITYSecure by defaultNoNewPrivileges, minimal capabilities, masked /proc, per-container network namespace, digest verification on every pull.
Read sectionPick your system and have nyxd running a container in under 60 seconds, on Linux, macOS or Windows.