flox

About

Flox provides one declared environment that developers, CI pipelines, and AI agents can all run identically. A single manifest.toml resolves to a locked, hash-pinned stack (for example Python 3.13, Node 22, and PostgreSQL 17), so teams can eliminate version drift between machines. The site describes the same environment carrying from laptop to CI to production, and notes that the stack can be built and published without multi-stage Dockerfiles or a Docker daemon, including imageless Kubernetes deployment.

Flox also emphasizes supply-chain visibility. Each environment carries a signed, hash-pinned software bill of materials, which the site says makes CVE remediation a matter of bumping one pin, rebuilding, and rolling back if needed. For enterprises, Flox offers SSO and role-based access control, private distribution from an internal registry (including air-gapped setups), audit and provenance features, and support with an SLA.