a-h/nix-airgapped-copy — explained in plain English
Analysis updated 2026-08-04 · repo last pushed 2024-12-13
Prepare a complete software bundle on your laptop and transfer it via USB to an offline government machine.
Update or install Nix-based software on air-gapped defense or financial systems without any internet access.
Verify a build truly works offline by running the import step with network access disabled.
Reproducibly move a project and all its dependencies to a disconnected computer using Docker containers.
| a-h/nix-airgapped-copy | andrewrk/nixpkgs | imrayy/nixos-dots | |
|---|---|---|---|
| Stars | 2 | 1 | 3 |
| Language | Nix | Nix | Nix |
| Last pushed | 2024-12-13 | 2023-10-26 | 2026-05-30 |
| Maintenance | Stale | Dormant | Maintained |
| Setup difficulty | moderate | moderate | moderate |
| Complexity | 4/5 | 4/5 | 3/5 |
| Audience | ops devops | developer | developer |
Figures from each repo's GitHub metadata at analysis time.
Requires Docker and a working Nix setup on both the connected and offline machines, plus a physical transfer method like a USB drive.
The nix-airgapped-copy project solves a very specific but important problem: it helps you move software built with the Nix package manager onto a computer that has no internet connection. The README notes that this version is archived, with development moved to a related project called flakegap, but the core idea remains the same. The tool works in two main steps: export and import. First, on a computer with internet access, you run a command that bundles up all the software packages, dependencies, and project files you need into a single portable archive. Then, you physically move that archive to your offline computer. On the disconnected machine, you run an import command that unpacks everything and builds your project, all without needing to contact any online servers. This would be useful for teams working in high-security environments, such as government, defense, or financial systems, where computers are deliberately kept offline to prevent data leaks or malware infections. If you are a developer who needs to run or update software on one of these isolated machines, this tool lets you prepare everything on a connected laptop and transfer it via a USB drive or similar method. The project uses Docker containers to keep the process consistent and reproducible. During the import step, the tool deliberately runs with network access disabled, which proves that the build truly works without any internet connection. This design choice acts as a built-in safety check: if anything was missed during the export step, the build will simply fail rather than silently reaching out to the web for missing pieces.
Moves Nix-built software to offline computers by bundling everything into a portable archive on a connected machine, then unpacking and building it on the disconnected one with no internet needed.
Mainly Nix. The stack also includes Nix, Docker.
Stale — no commits in 1-2 years (last push 2024-12-13).
The explanation does not mention a license, so the terms of use are unclear.
Setup difficulty is rated moderate, with roughly 30min to a first successful run.
Mainly ops devops.
This repo across BitVibe Labs
Don't trust strangers blindly. Verify against the repo.