Using Tailscale with Apple's containerization stack

Name: Using Tailscale with Apple's containerization stack
Availability: InStock
Author: highpost

by highpost·May 4, 2026·4 points·1 comment

Visit Project View on HN

AI Analysis

●MidShip ItSolve My Problem

Userspace Tailscale networking for Apple containers avoids kernel TUN limitations securely.

Strengths

•Handles userspace networking requirement for Apple's VM-based containers correctly.
•Stores auth keys in Keychain instead of environment variables or files.
•Scripts automate build, run, and cleanup for reproducible container lifecycles.

Weaknesses

•Reference implementation only, not a reusable CLI tool or package.
•Tied to macOS Apple Virtualization framework, limiting broader adoption significantly.

Post Description

Here's an example of how to build a simple Alpine Linux container using Apple's containerization CLI. It also demonstrates how to connect to the container through Tailscale SSH using a Tailscale auth key stored in Apple Keychain.

For example, I can create a container on my MacBook to run an application. A colleague in my Tailnet can then connect to this container to interact with that application from a coffeeshop or airliner while not exposing the rest of my MacBook.