nFPM

nFPM is a free Go tool for building Linux and Windows software packages from YAML, either through a command line or as a Go library. It suits developers who want several package formats without external runtime dependencies; MSIX is the notable caveat.

Overview

nFPM creates DEB, RPM, APK, IPK, Arch Linux, and MSIX packages from a YAML configuration. It is aimed at code-driven release workflows rather than graphical packaging: define the package in configuration, then use the same tool as a standalone binary or integrate it into Go code. That dependency-free runtime makes it a sensible choice for teams seeking to avoid tools such as Ruby and tar.

One configuration can cover metadata, files, dependencies, scripts, and format-specific overrides. This is useful when a release needs multiple package types, since shared definitions can coexist with target-specific adjustments. The trade-off is that package setup and maintenance remain the user's responsibility in YAML or code.

Key features

Multi-format packaging

Support for six package families makes nFPM relevant to projects distributing across several Linux systems and, with caveats, Windows. Format-specific overrides help accommodate differences between targets instead of forcing every package to share identical settings. MSIX support is experimental in GoReleaser's documentation, and symlinks are skipped, so Windows releases that depend on either should look elsewhere or treat this format cautiously.

CLI, Go library, and release integration

The command-line interface works for direct packaging, while the Go library offers a route to embed packaging in Go projects. GoReleaser can use nFPM to generate and publish Linux packages and Windows MSIX packages, making it a natural option for teams already using that release tool. The documented installation routes include package managers, prebuilt archives, Docker, Go install, and source builds; Homebrew, Scoop, APT, Yum, Winget, and NPM are among the package-manager choices.

Release artifacts are checksummed, with the checksum signed using cosign; Docker images are also cosign-signed. The repository links to a security policy and directs support questions to the GoReleaser community. These are useful release and support touchpoints, though users should expect a community channel rather than a separately described support service.

Pricing

nFPM: free. The free plan covers the packaging tool, and no paid plans or usage limits are stated. Its MIT license suits users who want an open-source option; there are no separate tiers or paid capabilities to weigh.

Platforms

nFPM is available for Linux, macOS, and Windows, and its directory platform coverage also includes web. Its output targets are DEB, RPM, APK, IPK, Arch Linux, and MSIX. The Go runtime is not an extra requirement for using the single binary, though Go is relevant if choosing the library or Go install route.

Who it's for

Choose nFPM if you maintain software releases in a command-line or Go-based workflow and want to produce multiple Linux package formats without relying on external runtime dependencies. It is less suited to users who want a visual installer builder, or to Windows packaging projects that require mature MSIX support or symlink preservation.

Pros and cons

• Pro: A single binary without external runtime dependencies reduces setup overhead in build environments.
• Pro: YAML covers metadata, files, dependencies, scripts, and format-specific overrides across six package families.
• Pro: CLI and Go-library use give both release pipelines and Go applications a way to invoke packaging.
• Con: Configuration-first packaging is a poor fit for users seeking a graphical workflow.
• Con: Experimental MSIX support and skipped symlinks constrain some Windows release needs.

Alternatives

Software Packaging Tools is the broader category list for comparing packaging options.

• Tauri Bundler is a free open-source Rust library for wrapping Rust executables in OS-specific app bundles, with platforms including Android and iOS; its public API stability is not strictly SemVer.
• makeself is a free option for creating self-extracting archives for Unix-compatible systems.
• Electron Forge is a free alternative for Linux, macOS, and Windows.
• electron-builder is a free alternative for Linux, macOS, and Windows.
• electron-packager is a free Node.js library and CLI for Linux, macOS, and Windows, and requires Node.js 22.12.0 or higher.
• InstallAware offers a free Visual Studio edition for commercial use and also has a free trial; it requires Visual Studio.
• IzPack is a free Apache License 2.0 alternative for Linux, macOS, Windows, and self-hosted environments.
• NSIS is free for any use; generated Windows installers can be as large as 2GB.

Verdict

nFPM is a strong choice for developers who need several Linux package formats from a dependency-light CLI or Go library, especially when packaging belongs in an automated release workflow. Its free, MIT-licensed model keeps the choice straightforward. Look elsewhere if you need a graphical workflow or dependable MSIX behavior with symlink support.