DevOps and Docker Talk: Cloud Native Interviews and Tooling

AWS Finch: The Minimal Local Container Solution

DevOps and Docker Talk: Cloud Native Interviews and Tooling

Show Notes

Bret and Nirmal are joined by Phil Estes of AWS to show us the Finch project, which bundles the best open source tools for building and running containers locally. Now it runs on macOS and Windows WSL2.

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs. We've been talking with Phil about this show for months, and now that Finch has come to Windows, we thought it was the best time to clue you in as to why AWS created the Finch project and what it does. You've probably heard of containerd, the most popular container runtime on the planet and BuildKit, the best way, in my opinion, to build container images. Those two work hand in hand in Docker and many other container tools. But you might not have heard of nerdctl or Lima, which are also open source tools that work with containerd and BuildKit to help you run containers locally in a virtual machine. Well, AWS had the idea of making an easy installer for these four tools. That's how Finch was born. Finch is not meant to be a replacement of your existing way to run containers. The tools it installs are a bit of a minimum feature set, if you will, and more focused on providing people the exact tools AWS uses in its container platforms, mainly containerd and BuildKit, which are everywhere in AWS. Rather than building something that's feature equivalent to other local container solutions like Docker Desktop and Rancher Desktop, Finch keeps it simple and does the bare minimum. If you just want an easily installable and minimal way to build and run local containers at the command line with no goofy, high-end fancy features, pure open source and just on Mac and Windows, at least at this point, you should give Finch a try. Be sure to check out the live recording of the complete show from February 22, 2024 on YouTube (Ep. 255). ★Topics★ Finch Website Bret's local container runtime spreadsheet Creators & Guests

Phil Estes - Guest

Cristi Cotovan - Editor

Beth Fisher - Producer

Bret Fisher - Host

Nirmal Mehta - Host

(00:00) - Intro

(00:35) - What is Finch?

(03:53) - Phil's History with Docker and Finch

(07:59) - Deep Dive into AWS Finch Project

(11:41) - How do the Components Tie Together

(25:31) - Finch's Position in the Container Ecosystem

(26:47) - Finch's Capabilities and Comparisons

(27:45) - VM Management and Lima Integration

(37:51) - Finch's Roadmap and Community Engagement

(41:49) - How Does Finch Connect to Lima?

(42:45) - Potential Lima Conflicts with Finch

(46:38) - Getting Started wtih Finch

You can also support this podcast by subscribing to my YouTube channel and my monthly newsletter at bret.news! Grab the best coupons for my GitHub, Agents, Docker, and Kubernetes courses. Join my cloud native DevOps community on Discord. Grab some merch at Bret's Loot Box Homepage bretfisher.com

★ Support this podcast ★

More from DevOps and Docker Talk: Cloud Native Interviews and Tooling

Sep 18, 2026

Control Plane CEO Doron Grinstein joins me to discuss how they’ve created an AI-native cloud API that virtualizes multi-cloud and hybrid cloud to simplify management and ship faster. Watch the video of this episode.

Aug 13, 2026

What does an AI-native CI look like? The Semaphore team joins me to talk about their focus on making your agent harness the gateway to testing, fixing, and deploying your code. Video podcast version here: https://youtu.be/HzXAdtVrW70

Jun 13, 2026

OpenChoreo is a “batteries included”, AI-native Kubernetes platform stack for Platform Engineers that combines GitOps, Observability, AI Agents, and Workflows into a custom K8s distribution “super pack” that is managed via Backstage, CLI, API, or MCP. Check out the video podcast version here: https://youtu.be/AqGWjxEfj2g

Apr 7, 2026

Michael Irwin of Docker joins me to run through Gordon AI improvements, Docker Hardened Images and what's now free, Docker Sandboxes for running agents in proper isolation, Model Runner updates including MLX support on Mac, MCP Toolkit dynamic discovery, and the newly renamed Docker Agent with its GitHub Action for automating PR reviews and docs checks. Check out the video podcast version here: https://youtu.be/dTF3b36Bq6w

Mar 20, 2026

Bret is joined by the founders of Plakar - Julien Mangeard and Gilles Chehade - to nerd out over backup engineering. The kind where you're building your own file formats and cryptographic layers, not just wiring up cron jobs. We get into how Plakar deduplicates and encrypts at the source so your cloud provider never sees your keys. Also, their snapshot model has no chain dependencies, which means you can delete any backup without breaking the others. We had a fun hour of backup horror stories, ransomware pragmatism, where I'm lobbying hard for a Docker volume integration. Check out the video podcast version here: https://youtu.be/OPRK5osKQHI

See all episodes →