Apple releases container 1.0: native OCI runtime for Linux on Apple silicon, free alternative to Docker Desktop
Apple released container 1.0.0 on June 9, hitting 30,000+ GitHub stars in days and trending globally as a second-most-watched project. The open-source Swift tool runs each OCI Linux container in its own lightweight micro-VM on Apple silicon Macs via the Virtualization framework, versus Docker Desktop's shared-VM model. Each container boots in sub-1-second, uses near-zero idle RAM, and works with any OCI-compatible image from Docker Hub. Licensed under Apache 2.0 (no enterprise paywall). Requires macOS 26 and Apple silicon only.
Apple Container's isolation model—one micro-VM per container—stands in sharp contrast to Docker's single shared Linux kernel across all containers. For untrusted workloads, the per-container isolation boundary is materially stronger. The tool aims to replace Docker Desktop for local development on Mac, eliminating both the background daemon resource overhead and the $15–24/month per-user enterprise licensing fee. For teams running 100+ developer Macs, that's a tangible cost save. Architects adopting this should know the trade-offs: no native Docker Compose orchestration, no Intel Mac support, and networking constraints on macOS 15.
For AI teams specifically, the isolation story matters. Vercel's eve and similar agent frameworks need sandboxed compute to run untrusted agent-generated code. Apple Container's per-VM isolation is a natural fit. The rapid adoption (30K stars in <2 weeks) signals developer demand for a vendor-neutral, no-license-fee container runtime on Mac.