AWS Finch: The Minimal Local Container Solution

AWS Finch: The Minimal Local Container Solution

Author: Bret Fisher April 19, 2024 Duration: 49:19

Bret and Nirmal are joined by Phil Estes of AWS to show us the Finch project, which bundles the best open source tools for building and running containers locally. Now it runs on macOS and Windows WSL2.

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

We've been talking with Phil about this show for months, and now that Finch has come to Windows, we thought it was the best time to clue you in as to why AWS created the Finch project and what it does.

You've probably heard of containerd, the most popular container runtime on the planet and BuildKit, the best way, in my opinion, to build container images. Those two work hand in hand in Docker and many other container tools. But you might not have heard of nerdctl or Lima, which are also open source tools that work with containerd and BuildKit to help you run containers locally in a virtual machine. Well, AWS had the idea of making an easy installer for these four tools. That's how Finch was born.

Finch is not meant to be a replacement of your existing way to run containers. The tools it installs are a bit of a minimum feature set, if you will, and more focused on providing people the exact tools AWS uses in its container platforms, mainly containerd and BuildKit, which are everywhere in AWS. Rather than building something that's feature equivalent to other local container solutions like Docker Desktop and Rancher Desktop, Finch keeps it simple and does the bare minimum. 

If you just want an easily installable and minimal way to build and run local containers at the command line with no goofy, high-end fancy features, pure open source and just on Mac and Windows, at least at this point, you should give Finch a try.

Be sure to check out the live recording of the complete show from February 22, 2024 on YouTube (Ep. 255).

★Topics★
Finch Website
Bret's local container runtime spreadsheet

Creators & Guests

  • (00:00) - Intro
  • (00:35) - What is Finch?
  • (03:53) - Phil's History with Docker and Finch
  • (07:59) - Deep Dive into AWS Finch Project
  • (11:41) - How do the Components Tie Together
  • (25:31) - Finch's Position in the Container Ecosystem
  • (26:47) - Finch's Capabilities and Comparisons
  • (27:45) - VM Management and Lima Integration
  • (37:51) - Finch's Roadmap and Community Engagement
  • (41:49) - How Does Finch Connect to Lima?
  • (42:45) - Potential Lima Conflicts with Finch
  • (46:38) - Getting Started wtih Finch

You can also support this podcast by subscribing to my YouTube channel and my monthly newsletter at bret.news!

Grab the best coupons for my GitHub, Agents, Docker, and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

★ Support this podcast ★

Bret Fisher hosts DevOps and Docker Talk: Cloud Native Interviews and Tooling alongside Nirmal Mehta, pulling conversations directly from their live audience sessions. This isn't a theoretical lecture series; it's grounded in the practical, often messy realities of building and running modern systems. Each episode digs into the specific tools and philosophies shaping infrastructure today, from the foundational elements like Docker and container orchestration with Kubernetes or Swarm to the broader cultural shifts of DevOps, SRE, and platform engineering. You'll hear discussions that span the entire software lifecycle, touching on the integration of security with DevSecOps, the automation promises of GitOps, and what "Cloud Native" truly means for development teams. The dialogue stays focused on actionable insights and real-world use cases, offering a genuine sense of what works and what doesn't in the field. For anyone navigating the container and cloud ecosystem, this podcast serves as a regular, insightful check-in with practitioners and experts, hosted by someone deeply embedded in the community. The natural, interview-driven format makes complex topics accessible, ensuring listeners come away with more than just buzzwords-they get context and clarity.
Author: Language: English Episodes: 50

DevOps and Docker Talk: Cloud Native Interviews and Tooling
Podcast Episodes
Best of Cloud Native 2024 [not-audio_url] [/not-audio_url]

Duration: 1:11:05
Bret and Nirmal reunite for their traditional annual Holiday Special episode of breaking down the most significant developments in cloud native from 2024 and sharing predictions for 2025.💥 This episode is brought to you…
Aikido: Is a Single DevSecOps Tool Possible? [not-audio_url] [/not-audio_url]

Duration: 1:01:56
Or watch the video version on YouTube. Bret is joined by Willem Delbare and Roeland Delrue to discuss Aikido, a security tool consolidation platform designed specifically for smaller teams and solo DevOps practitioners.…
DevOps Cert Prep using AI, with the KodeKloud Team [not-audio_url] [/not-audio_url]

Duration: 1:12:23
Bret is joined by Mumshad Mannambeth and Vijin Palazhi of KodeKloud for Q&A on what we should be studying and certifying for in 2025. 😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on l…
KubeCon Engineering Takeaways [not-audio_url] [/not-audio_url]

Duration: 37:15
Bret and Nirmal recorded this special offline episode at KubeCon North America in Salt Lake City. We hung out at the AWS booth to break down the major trends and developments from the conference. 😇 My new GitHub Security…
Personal AI with Ken Collins [not-audio_url] [/not-audio_url]

Duration: 57:58
Bret and Nirmal Mehta are joined by Ken Collins to dig into using AI for more than coding, and if we can build an AI assistant that knows us.😇 My new GitHub Security workshop has launched! A free 2-hour workshop with han…
State of Kubernetes UIs [not-audio_url] [/not-audio_url]

Duration: 17:08
Bret explores the spectrum of user interfaces and tools available for managing Kubernetes clusters as of Autumn 2024. 😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden yo…
Inspektor Gadget [not-audio_url] [/not-audio_url]

Duration: 40:19
Bret and Nirmal are joined by Chris Kühl and Jose Blanquicet, the maintainers of Inspektor Gadget, the new eBPF-focused multitool, to see what it's all about.😇 My new GitHub Security workshop has launched! A free 2-hour…
MLOps for DevOps People [not-audio_url] [/not-audio_url]

Duration: 48:29
Bret and Nirmal are joined by Maria Vechtomova, a MLOps Tech Lead and co-founder of Marvelous MLOps, to discuss the obvious and not-so obvious differences between a MLOps Engineer and traditional DevOps jobs.😇 My new Git…
Traefik 3.0: What's New? [not-audio_url] [/not-audio_url]

Duration: 54:15
Bret and Nirmal were joined by Emile Vauge, CTO of Traefik Labs to talk all about Traefik 3.0.😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workfl…
Debug Containers with Mintoolkit [not-audio_url] [/not-audio_url]

Duration: 1:15:34
Bret is joined by DockerSlim (now mintoolkit) founder Kyle Quest, to show off how to slim down your existing images with various options. 😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-…