With complete end-to-end provenance and innate hermeticity, you'll never be surprised.
Receipts for every environment
Verified provenance and CVE for all env dependencies.
Total control over workflows
A personalized workspace that keeps environment parity.
Scale across every machine
Run your workload anywhere, from anything. We mean it.
Complete and total isolation
Sandbox in restrained microVMs to keep your day moving.
[ What is Minimal? ]
Operate in reproducible sandboxes in libkrun microVMs. Everything your agents need is defined in advance and travels across branches, forks, and worktrees.
A Trusted, Observable Supply Chain
Components are built from source, in compliance with SLSA L3.
Infinitely Scalable Environments
Machine agnostic daemons build in reproducible, isolated sandboxes.
| Docker | nono | Minimal | |
|---|---|---|---|
| Rapid Invocation | partially supported | supported | supported |
| Stateful | supported | supported | supported |
| Durable | supported | supported | supported |
| Local-First | supported | supported | supported |
| Remote Execution | supported | not supported or not applicable | coming soon |
| Supply Chain Visibility | partially supported | partially supported | supported |
| Isolation Boundary | container / microVM | Landlock / Seatbelt | microVM / namespace |
[ Packages ]
Never worry if an agent has grabbed a random tool. Every package comes with extensive provenance, including:
[ Agentic AI ]
Keep agentic velocity without sacrificing the safety of your projects and stations. Enhanced security features include:
Agents can also read the package catalog through the hosted MCP server or the OpenAPI document.
Managed hermetic builds, org-wide policy enforcement, audit-ready attestation, and more!
[ Install ]
Minimal is in public beta and available for local download on Linux and macOS.
Download Minimal v0.7.2:
curl --proto "=https" --tlsv1.2 -fsSL https://go.minimal.dev/stable | shpress 'c' to copy
[upstream]
repo = "https://github.com/gominimal/pkgs"
branch = "main"
[stack]
use = "rust"
[defaults]
state_key = "dev"
[session]
packages = ["base", "vim", "git"]Have more questions? Ask us on Discord.
Yes. Minimal is open source, and it is in public beta and free to download for Linux and macOS. Minimal for Teams — managed hermetic builds, org-wide policy enforcement and audit-ready attestation — is coming soon.
Linux and macOS. On Linux, Minimal runs on x86-64 or ARM64 with a 5.10 or later kernel and unprivileged user namespaces enabled. On macOS it runs on Apple Silicon (M1 or later), where it boots a lightweight Linux microVM via libkrun on Apple's Hypervisor.framework; Intel Macs are not supported.
A Minimal session runs in a sandbox of its own rather than in a container — a lightweight Linux microVM on macOS, and on Linux either user and mount namespaces or that same microVM — and it is declared once in a minimal.toml that lives with your code and travels across branches, forks and worktrees. Sessions are stateful, with a native understanding of your Git worktree context, file patches and tool configurations. Every package inside is built from source in compliance with SLSA Build L3 and ships with a CycloneDX SBOM and VEX data, so the supply chain stays visible.
Everything that runs in a session runs in a sandbox, and nothing from your host leaks in unless you allow it. On macOS the session lives inside a lightweight Linux microVM booted by libkrun on Apple's Hypervisor.framework; on Linux the sandbox is built from unprivileged user and mount namespaces, and the same microVM backend is available with --provider local-minvmd. Agent policies define file system and network access.
Minimal supports most modern languages, such as C, C++, Rust, Python, Java, Go and JavaScript. Toolchains come from Minimal's package catalog, an expanding library of open source software in which every package is defined by a Nickel-based build spec and compiled from source in a hermetically sealed environment.