gitwtfhub

wtf is nix-airgapped-copy?

a-h/nix-airgapped-copy — explained in plain English

Analysis updated 2026-08-04 · repo last pushed 2024-12-13

2NixAudience · ops devopsComplexity · 4/5StaleSetup · moderate

TL;DR

Moves Nix-built software to offline computers by bundling everything into a portable archive on a connected machine, then unpacking and building it on the disconnected one with no internet needed.

Mindmap

mindmap
  root((repo))
    What it does
      Bundles Nix packages
      Export then import
      Works fully offline
    How it works
      Export on connected PC
      Transfer via USB
      Import on offline PC
    Tech stack
      Nix
      Docker
      Nix flakes
    Use cases
      High-security environments
      Government and defense
      Financial systems
    Audience
      Developers in secure setups
      DevOps engineers
    Status
      Archived project
      Moved to flakegap

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

Why would anyone build with this?

REASON 1

Prepare a complete software bundle on your laptop and transfer it via USB to an offline government machine.

REASON 2

Update or install Nix-based software on air-gapped defense or financial systems without any internet access.

REASON 3

Verify a build truly works offline by running the import step with network access disabled.

REASON 4

Reproducibly move a project and all its dependencies to a disconnected computer using Docker containers.

What's in the stack?

NixDocker

How it stacks up

a-h/nix-airgapped-copyandrewrk/nixpkgsimrayy/nixos-dots
Stars213
LanguageNixNixNix
Last pushed2024-12-132023-10-262026-05-30
MaintenanceStaleDormantMaintained
Setup difficultymoderatemoderatemoderate
Complexity4/54/53/5
Audienceops devopsdeveloperdeveloper

Figures from each repo's GitHub metadata at analysis time.

How do you spin it up?

Difficulty · moderate Time to first run · 30min

Requires Docker and a working Nix setup on both the connected and offline machines, plus a physical transfer method like a USB drive.

The explanation does not mention a license, so the terms of use are unclear.

Wtf does this do

The nix-airgapped-copy project solves a very specific but important problem: it helps you move software built with the Nix package manager onto a computer that has no internet connection. The README notes that this version is archived, with development moved to a related project called flakegap, but the core idea remains the same. The tool works in two main steps: export and import. First, on a computer with internet access, you run a command that bundles up all the software packages, dependencies, and project files you need into a single portable archive. Then, you physically move that archive to your offline computer. On the disconnected machine, you run an import command that unpacks everything and builds your project, all without needing to contact any online servers. This would be useful for teams working in high-security environments, such as government, defense, or financial systems, where computers are deliberately kept offline to prevent data leaks or malware infections. If you are a developer who needs to run or update software on one of these isolated machines, this tool lets you prepare everything on a connected laptop and transfer it via a USB drive or similar method. The project uses Docker containers to keep the process consistent and reproducible. During the import step, the tool deliberately runs with network access disabled, which proves that the build truly works without any internet connection. This design choice acts as a built-in safety check: if anything was missed during the export step, the build will simply fail rather than silently reaching out to the web for missing pieces.

Yoink these prompts

Prompt 1
I need to deploy a Nix-based project to an air-gapped server with no internet. Show me how to use nix-airgapped-copy to export the bundle, transfer it, and import it on the offline machine.
Prompt 2
Help me set up a workflow where I bundle Nix software on my connected laptop, verify it builds with no network, and then install it on a disconnected computer using a USB drive.
Prompt 3
I'm working in a high-security environment where computers are offline. Walk me through exporting a Nix project and its dependencies into a portable archive and importing it on the target machine.
Prompt 4
Show me how to test that my Nix build is truly air-gapped by running the nix-airgapped-copy import step with network disabled so it fails if anything is missing.

Frequently asked questions

wtf is nix-airgapped-copy?

Moves Nix-built software to offline computers by bundling everything into a portable archive on a connected machine, then unpacking and building it on the disconnected one with no internet needed.

What language is nix-airgapped-copy written in?

Mainly Nix. The stack also includes Nix, Docker.

Is nix-airgapped-copy actively maintained?

Stale — no commits in 1-2 years (last push 2024-12-13).

What license does nix-airgapped-copy use?

The explanation does not mention a license, so the terms of use are unclear.

How hard is nix-airgapped-copy to set up?

Setup difficulty is rated moderate, with roughly 30min to a first successful run.

Who is nix-airgapped-copy for?

Mainly ops devops.

View the repo → Decode another repo

This repo across BitVibe Labs

Don't trust strangers blindly. Verify against the repo.