Apple container
Apple's open-source tool for running Linux containers as lightweight VMs on macOS.
HN commenters use it mainly to sandbox AI coding agents in lightweight Linux VMs on macOS12345, and as a replacement for Docker for Mac.678 The most common caveat is that it is still a work in progress910, with reports of issues, slow filesystem performance and failures to run.1112
Why people recommend it
Agent sandboxing · 3
Commenters run AI coding agents and LLM CLI tools inside it to keep them away from the host.
“Apple containers are great for providing a sandbox to your AI coding agents”
“Apple containers specifically, for better hypervisor-level isolation”
Show 1 more
“I run LLMs CLI tools out of containers with mounted directories. Absolutely zero issues in my workflow for me.”
Docker replacement · 3
Some use it instead of Docker for Mac, and it can pull and run Docker Hub images.
“apple/container is a good replacement for Docker for Mac on macOS. I have been using it for the last 6 months”
“Well you can use Apple Containers - more convenient than Docker.”
Show 1 more
“I run LLMs CLI tools out of containers with mounted directories. Absolutely zero issues in my workflow for me.”
Strong isolation · 2
Its hypervisor-level isolation is described as better than Docker's.
“Apple containers specifically, for better hypervisor-level isolation”
“The isolation it provides is superior than docker.”
Ease of use · 3
Commenters call it easy and convenient to use, with a neat UX.
“on mac you can virtualise really easily into microvms now with https://github.com/apple/container”
“Well you can use Apple Containers - more convenient than Docker.”
Show 1 more
Caveats and dissent
Work in progress · 2
Users describe it as unfinished, with known issues.
“Apple Container is an interesting work in progress”
“apple/container is a good replacement for Docker for Mac on macOS. I have been using it for the last 6 months”
Reliability · 1
One user found that the new container machine subcommand failed to run at all.
Filesystem performance · 1
One user found filesystem performance too slow for Node and Rust work that stats many small files.
x86 images · 1
x86 containers require Rosetta, so one user sticks to AArch64 images.
“I run LLMs CLI tools out of containers with mounted directories. Absolutely zero issues in my workflow for me.”
Network access · 1
When sandboxing agents, you still need to block network access yourself.
“On Mac you now have Apple Container which is a lightweight Linux VM.”
Not truly native · 1
One commenter argues it is just a Linux VM, not a native Apple solution.
“It's just a linux vm running normal docker engine.”
Often compared with
Who recommends it in their own words
From the makers not counted in the ranking
“We'd recommend using a base image for the guest that includes systemd.”
Threads where it came up
- macOS Container Machines 4 mentions
- Building and Shipping Mac and iOS Apps Without Ever Opening Xcode 2 mentions
- Docker Sandboxes – Disposable, isolated sandboxes for AI agents 1 mention
- Humans missed 1 in 3 threats approving AI agent commands across 40k game runs 1 mention
- Show HN: Davit, a Apple Containers UI 1 mention
- AI Coding at Home Without Going Broke 1 mention
Also written as Apple Container, Apple containers, Apple Containers, apple/container. Data: apple-container.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 13
“Apple Container is an interesting work in progress”
“On Mac you now have Apple Container which is a lightweight Linux VM.”
“Well you can use Apple Containers - more convenient than Docker.”
“It's just a linux vm running normal docker engine.”
“I run LLMs CLI tools out of containers with mounted directories. Absolutely zero issues in my workflow for me.”
> I'm guessing the next thing I should probably look into is some sort of machine vm I can tunnel my codex-gui requests to so I don't have to deal with the sandbox approvals (I don't want to give it "dangerous" access to my entire mac). Docker sbx is worth looking at here, possibly; essentially a canned VM with a file system mount and layers for installing various agentic coding environments that cannot work outside
“Apple containers specifically, for better hypervisor-level isolation”
“UX wise it looks kinda neat though!”
“Apple containers are great for providing a sandbox to your AI coding agents”
“container failed to run at all for me”
“on mac you can virtualise really easily into microvms now with https://github.com/apple/container”
“The isolation it provides is superior than docker.”
“apple/container is a good replacement for Docker for Mac on macOS. I have been using it for the last 6 months”