Apple Unveils 'container': An Open-Source Swift Tool for Linux Containers on Apple Silicon

Apple's research division has introduced a significant new open-source project named 'container,' a command-line tool developed in Swift that enables the execution of Linux containers as lightweight virtual machines on Apple Silicon-powered Macs. This initiative provides a native solution for developers, moving away from the common practice of hosting multiple containers within a single, always-on Linux VM. The 'container' tool is designed to be OCI-compatible, meaning it can readily consume and produce standard container images. This compatibility allows developers to pull images from popular registries such as Docker Hub or GitHub Container Registry and push their own built images back to any standard registry. The project is released under the Apache 2.0 license, emphasizing its open and accessible nature. A core differentiator of Apple's 'container' is its architectural approach: it runs each Linux container within its own dedicated, lightweight virtual machine. This design choice offers several advantages, including enhanced security through VM-level isolation, reduced attack surface due to a minimal set of core utilities, and improved privacy by allowing users to mount only the necessary data for each VM. While these lightweight VMs consume less memory than full virtual machines, the tool does have some limitations, such as partial memory ballooning support and the absence of a built-in Docker Compose equivalent. Currently, 'container' exclusively supports Apple Silicon Macs, with no compatibility for Intel-based systems. It is optimized for macOS 26, which offers advanced virtualization and networking capabilities, though it can run on macOS 15 with certain networking restrictions. The tool also introduces 'container machines,' persistent Linux environments built from OCI images, where the user's home directory is mounted, and the filesystem persists across sessions. This new offering from Apple signifies a strategic move to provide robust, native containerization support for its developer ecosystem, streamlining workflows and enhancing the security posture of containerized applications on its hardware.