r/programming • u/Shot-Reporter-2443 • 12d ago

Rebuilding the Linux microVM stack on Apple Silicon

https://encore.dev/blog/firecracker-apple-silicon
27 Upvotes

83% Upvoted

3 comments sorted by

3

u/RyuNeonNinja 10d ago

yeah, the nixos-config approach is solid for this exact reason.

0

u/This_Medium9994 10d ago

nixos-config on macos is fine for dev tooling but people always gloss over the actual attack surface difference, a linux vm on apple silicon is still passing through virtio devices and if that hypervisor layer has a bug you're trusting apple's virtualization framework same as you'd trust any unaudited conrract. not saying dont do it, just dont pretend "its just nix" makes the isolation story iddntical to bare metal linux.

4

u/albsen 12d ago

nice engineering. Interesting that its easier to rebuild the linux build stack then switch from macos to linux. :-) i personally prefer linux but thats just me, i get why some people like macos. you could also run a dev vm on macos just like mitchell hashimoto does. https://github.com/mitchellh/nixos-config/