macOS in QEMU in Docker

Somewhat off topic but still highly relevant for people who actually want to use projects like this: why oh why do so many build recipes such as Dockerfiles insist on pulling random stuff off the internet as part of the build process? For example, the Dockerfile in this project pulls in two Git repositories and a script at build time. Besides the obvious build failures on heavily sandboxed build servers with no access to the internet, this forces anyone with…

So this is pretty misleading. It's really a full system emulator (qemu) running inside Docker, using root privileges on the container that make the isolation very weak (--privileged). It also uses hardware assisted virtualization (KVM) which is not going to be available most of the time Docker is. You can think of the Docker platform itself as subset of the Linux platform. With many common features removed by default... SYS_PTRACE, cgroups come to mind as not allowed within the container…

I did an interview with Sickcodes a couple of years ago when this first emerged. He does extremely interesting stuff and his point of view is unique. https://www.vice.com/en/article/akdmb8/open-source-app-lets-...

Posted 1 year ago: https://news.ycombinator.com/item?id=23419101