GhostVM – macOS Containers on Apple Silicon
Native macOS VMs with APFS snapshots beat Docker for agent isolation.
This is a practical glue layer over Apple's container CLI that bundles three handy steps into one command: create from an image, copy host folders into /sandbox/host, and run an init script inside the container. It's a tidy shortcut for people orchestrating many short-lived macOS sandboxes, though it's narrowly useful (macOS-only) and could use richer examples and error handling to feel more robust.
macOS developers, dev-tool authors, and anyone building automation around Apple container sandboxes
Native macOS VMs with APFS snapshots beat Docker for agent isolation.
Full macOS isolation beats containers for agents needing GUI apps and native tools.
Hypervisor isolation for AI agents beats containers when running untrusted code locally.
Apple Container CLI integration makes local GitLab CI actually fast on MacOS.
Runs entirely on-device with Apple Intelligence, but struggles with complex tool chains.
TLA+ verified sandbox makes --dangerously-skip-permissions safe for Claude Code and other agents on macOS.