[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-apple-adds-containermachine-support-to-macos":10,"sections":42},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":30,"persona_id":22,"persona_name":22,"section":31,"tags":32,"sources":37,"feedback":41,"feedback_at":22,"cost_usd":41,"total_tokens":41},508,"apple-adds-containermachine-support-to-macos","Apple Documents VM-Backed Containers for macOS","Apple's container tool for macOS wraps each Linux container in its own lightweight VM, trading density for stronger isolation.","Apple has published documentation for the \"container machine\" abstraction at the heart of its open-source macOS container tool — the thin Linux VM that sits under every container you run.\n\nThe `container` project, open-sourced by Apple for macOS, uses what it calls a container machine as its execution layer: a lightweight virtual machine powered by Apple's Virtualization framework. Unlike the shared-kernel model Docker uses natively on Linux — where containers share a host kernel and are separated only by namespaces and cgroups — each macOS container gets its own VM. The documentation covers how these machines are created, configured, and torn down as part of the container lifecycle.\n\nThe architecture is a direct answer to a basic constraint: macOS has no Linux kernel to share, so any Linux container runtime on Apple hardware has to bring its own. Apple's choice to give each container a dedicated VM rather than pooling them into one shared Linux host raises the per-container resource cost but raises the isolation floor too. On Apple Silicon, where the Virtualization framework starts VMs quickly and with comparatively low overhead, that tradeoff is less punishing than it would have been on Intel Macs.\n\nDocker Desktop has shipped a single shared Linux VM for years; Podman Desktop takes the same route. One VM per container is a cleaner design and a natural pitch to security-conscious teams — though developers running dozens of containers simultaneously may find the memory math adds up fast.","[\"containers\",\"apple\",\"macos\",\"virtualization\"]","2026-06-10T00:29:01.000Z","2026-06-10T01:22:37.747Z","2026-06-18T08:15:26.977Z","published",null,[24],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"Provide a clearer lead stating what changed, cite the official Apple documentation directly, add concrete details (e.g., file name, release date, any performance numbers), and avoid speculative language about third‑party tools; also verify that this is a new feature rather than an existing capability.","resolved","https:\u002F\u002Fcdn.xyz.onl\u002Farticle-images\u002Fapple-adds-containermachine-support-to-macos.webp","dev-tools",[33,34,35,36],"containers","apple","macos","virtualization",[38],{"name":39,"url":40},"Hacker News","https:\u002F\u002Fgithub.com\u002Fapple\u002Fcontainer\u002Fblob\u002Fmain\u002Fdocs\u002Fcontainer-machine.md",0,{"sections":43},[44,49,54,59,64,69,74,79,84,88,93,98,103,108],{"name":45,"slug":46,"count":47,"latest_published_at":48},"AI","ai",2602,"2026-07-18T18:30:00.000Z",{"name":50,"slug":51,"count":52,"latest_published_at":53},"Security","security",315,"2026-07-17T19:30:00.000Z",{"name":55,"slug":56,"count":57,"latest_published_at":58},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":60,"slug":61,"count":62,"latest_published_at":63},"Policy","policy",169,"2026-07-17T19:49:53.000Z",{"name":65,"slug":66,"count":67,"latest_published_at":68},"Hardware","hardware",126,"2026-07-16T20:09:48.000Z",{"name":70,"slug":71,"count":72,"latest_published_at":73},"Consumer Tech","consumer-tech",94,"2026-07-16T16:29:46.000Z",{"name":75,"slug":76,"count":77,"latest_published_at":78},"Software","software",72,"2026-07-17T09:42:05.000Z",{"name":80,"slug":81,"count":82,"latest_published_at":83},"Science","science",66,"2026-07-10T10:29:37.000Z",{"name":85,"slug":31,"count":86,"latest_published_at":87},"Dev Tools",60,"2026-07-16T16:59:13.000Z",{"name":89,"slug":90,"count":91,"latest_published_at":92},"Startups","startups",42,"2026-07-16T16:30:35.000Z",{"name":94,"slug":95,"count":96,"latest_published_at":97},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":99,"slug":100,"count":101,"latest_published_at":102},"General","general",29,"2026-07-10T22:28:58.000Z",{"name":104,"slug":105,"count":106,"latest_published_at":107},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":109,"slug":110,"count":111,"latest_published_at":112},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]