Firecracker needs KVM and therefore a Linux host, and the image tooling around it needs loop mounts and Linux userland. We rebuilt the stack on Apple's Virtualization.framework to boot the same OCI images as microVMs on macOS and on Linux.
Building Linux kernel on macOS natively
shuru - Local-first microVM sandbox for AI agents
Local-first microVM sandbox for AI agents on macOS, with experimental Linux ARM64 support
Apple Container external driver for macOS by afbjorklund · Pull Request #3839 · lima-vm/lima
A new macOS driver similar to the WSL2 driver for Windows, creating virtual machines from container images (as rootfs). Issue #3788 make native && ADDITIONAL_DRIVERS=ac make additio...
apple/container
A tool for creating and running Linux containers using lightweight virtual machines on a Mac. It is written in Swift, and optimized for Apple silicon.
microsandbox - Every agent deserves its own machine
Run lightweight microVMs locally. Programmable networking, custom filesystems, secrets that never leak.
AluminiumOS on Mac (MysticLeaks)
First public macOS kernel memory corruption exploit on Apple M5
Apple spent five years building hardware and software to make memory corruption exploits dramatically harder. Our engineers, working together with Mythos Preview, built a working exploit in five days.
Introducing Deno Sandbox | Deno
Instant Linux microVMs with defense-in-depth security for running untrusted code.
Mount Thor — AI Execution Environments on Apple Hardware
Managed macOS environments for AI workloads that require native desktop access, persistent state, or model inference on Apple silicon.
Xous: A Pure-Rust Rethink of the Embedded Operating System
Xous is a message-passing microkernel implemented in pure Rust, targeting secure embedded applications. This talk covers three novel aspe...
clandestine.eth 🦇🔊 on Twitter / X
Heterogeneous acceleration on Apple Silicon achieved.ANE + GPU running in parallel.Mirror SD with DFlash, ported to MLX — targeting ANE + GPU simultaneously.The M-series was designed for this. We just hadn't unlocked it yet. pic.twitter.com/raSH0CMN4V— clandestine.eth 🦇🔊 (@0xClandestine) April 15, 2026
