frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

YC S25 Applicant: Findecor – AI-Powered Home Decor Assistant (Feedback Welcome)

https://www.findecor.io/
1•shhamidov_216•40s ago•1 comments

Half Life 2: Lost Coast HDR overview (2005)

https://bit-tech.net/previews/gaming/pc/hl2_hdr_overview/1/
1•mxfh•1m ago•0 comments

AI can spontaneously develop human-like communication, study finds

https://www.theguardian.com/technology/2025/may/14/ai-can-spontaneously-develop-human-like-communication-study-finds
1•pseudolus•2m ago•0 comments

You think ransomware is bad now? Wait until it infects CPUs

https://www.theregister.com/2025/05/11/cpu_ransomware_rapid7/
4•chrisjj•3m ago•0 comments

Infinite-Canvas: Higher-Resolution Video Outpainting

https://ojs.aaai.org/index.php/AAAI/article/view/32213
2•handfuloflight•4m ago•0 comments

Why aren't Americans filling the manufacturing jobs we have?

https://www.npr.org/sections/planet-money/2025/05/13/g-s1-66112/why-arent-americans-filling-the-manufacturing-jobs-we-already-have
3•toomuchtodo•4m ago•0 comments

Infrastructure, Common Goods, and the Future of Open Source Software

https://v5.chriskrycho.com/elsewhere/infrastructure-common-goods-and-the-future-of-open-source-software/
2•speckx•5m ago•0 comments

Uncle Sam pulls $2.4B Leidos deal to support CISA after rival alleges foul play

https://www.theregister.com/2025/05/14/dhs_leidos_contract/
2•rntn•5m ago•0 comments

GPT-4.1 will be available directly in ChatGPT starting today

https://twitter.com/OpenAI/status/1922707554745909391
3•tosh•7m ago•0 comments

Details about Lava: Airbnb's new animation format

https://twitter.com/ramon_fritsch/status/1922647368295481421
1•aqeelat•7m ago•0 comments

Oniux: Kernel-level Tor isolation for any Linux app

https://blog.torproject.org/introducing-oniux-tor-isolation-using-linux-namespaces/
1•todsacerdoti•7m ago•0 comments

Kids Online Safety Act is back

https://www.theverge.com/news/666729/kids-online-safety-act-reintroduced
3•leotravis10•9m ago•0 comments

Launch day for Maple AI – a new privacy AI in the Apple App Store with E2EE

https://blog.trymaple.ai/introducing-maple-ai-for-iphone-and-ipad-your-most-personal-ai-assistant-on-the-go/
2•markskram•10m ago•0 comments

Dropbox Is Down

https://status.dropbox.com/
2•davidcox143•11m ago•2 comments

My Microsoft MultiMedia Keyboard 1.0A is dead

https://kotaku.com/mechanical-keyboard-microsoft-squidgy-keys-1851780616
1•ericzawo•14m ago•0 comments

Yume – Transform your content with GPU shaders

https://yume.sh/
1•andrew_rfc•15m ago•0 comments

Unhappy Meals (2007)

https://www.nytimes.com/2007/01/28/magazine/28nutritionism.t.html
1•Tomte•17m ago•0 comments

How to systematically secure anything (2023)

https://github.com/veeral-patel/how-to-secure-anything
2•Tomte•17m ago•0 comments

A Framework for Defining and Refining Your ICP

https://a16z.com/framework-define-refine-icp/
1•tzury•18m ago•0 comments

Keeping Time on a Stream

https://s2.dev/blog/timestamping
2•shikhar•19m ago•0 comments

Beyond the Wrist: Debugging RSI

https://www.debugyourpain.org/docs/main_posts/understand/debugging_rsi/
7•luu•19m ago•0 comments

54 years ago, a computer programmer fixed a bug, created an existential crisis

https://www.inverse.com/innovation/blinking-cursor-history
2•cpeterso•19m ago•0 comments

How the 'end of history' illusion shapes your life choices

https://www.bbc.com/future/article/20230619-how-the-end-of-history-illusion-shapes-your-life-choices
2•jhncls•20m ago•0 comments

Warners Reverses Course: Changes Max's Name Back to HBO Max

https://www.hollywoodreporter.com/business/digital/max-name-change-hbo-max-upfronts-1236216616/
3•jaredwiener•23m ago•0 comments

How we (re)built our AI agent for code reviews in IDEs

https://www.coderabbit.ai/blog/how-we-built-our-ai-code-review-tool-for-ides
1•smb06•24m ago•1 comments

In search of a dynamist vision for safe superhuman AI

https://helentoner.substack.com/p/dynamism-vs-stasis
1•stephenflanders•24m ago•0 comments

ONOX: The all-electric tractor with swappable battery packs

https://electrek.co/2025/05/13/meet-onox-the-all-electric-tractor-with-swappable-battery-packs/
1•gnabgib•26m ago•1 comments

Trump admin ends extreme weather database that has tracked cost of disasters

https://www.cnn.com/2025/05/08/climate/noaa-ends-disaster-database
7•vinnyglennon•26m ago•0 comments

Learning pointers 10 years too late

https://codebynight.dev/posts/day-2-of-learning-go-the-pointers-i-finally-understood-10-years-later/
2•shivc•27m ago•0 comments

CISA changes vulnerabilities updates, shifts to X and emails

https://www.theregister.com/2025/05/12/cisa_vulnerabilities_updates_x/
2•rbanffy•28m ago•1 comments
Open in hackernews

Show HN: Lumier – Run macOS VMs in a Docker

https://github.com/trycua/cua/tree/main/libs/lumier
66•GreenGames•3h ago
Hey HN, we're excited to share Lumier (https://github.com/trycua/cua/tree/main/libs/lumier), an open-source tool for running macOS and Linux virtual machines in Docker containers on Apple Silicon Macs.

When building virtualized environments for AI agents, we needed a reproducible way to package and distribute macOS VMs. Inspired by projects like dockur/windows (https://github.com/dockur/windows) that pioneered running Windows in Docker, we wanted to create something similar but optimized for Apple Silicon. The existing solutions either didn't support M-series chips or relied on KVM/Intel emulation, which was slow and cumbersome. We realized we could leverage Apple's Virtualization Framework to create a much better experience.

Lumier takes a different approach: it uses Docker as a delivery mechanism (not for isolation) and connects to a lightweight virtualization service (lume) running on your Mac. This creates true hardware-accelerated VMs using Apple's native virtualization capabilities.

With Lumier, you can: - Launch a ready-to-use macOS VM in minutes with zero manual setup - Access your VM through any web browser via VNC - Share files between your host and VM effortlessly - Use persistent storage or ephemeral mode for quick tests - Automate VM startup with custom scripts

All of this works natively on Apple Silicon (M1/M2/M3/M4) - no emulation required.

To get started:

1. Install Docker for Apple Silicon: https://desktop.docker.com/mac/main/arm64/Docker.dmg

2. Install lume background service with our one-liner:

  /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/trycua/cua/main/libs/lume/scripts/install.sh)"
3. Start a VM (ephemeral mode):

  docker run -it --rm \
  --name lumier-vm \
    -p 8006:8006 \
    -e VM_NAME=lumier-vm \
    -e VERSION=ghcr.io/trycua/macos-sequoia-cua:latest \
    -e CPU_CORES=4 \
    -e RAM_SIZE=8192 \
    trycua/lumier:latest
4. Open http://localhost:8006/vnc.html in your browser. The container will generate a unique password for each VM instance - you'll see it in the container logs.

For persistent storage (so your changes survive container restarts):

mkdir -p storage docker run -it --rm \ --name lumier-vm \ -p 8006:8006 \ -v $(pwd)/storage:/storage \ -e VM_NAME=lumier-vm \ -e HOST_STORAGE_PATH=$(pwd)/storage \ trycua/lumier:latest

Want to share files with your VM? Just add another volume:

mkdir -p shared docker run ... -v $(pwd)/shared:/shared -e HOST_SHARED_PATH=$(pwd)/shared ...

You can even automate VM startup by placing an on-logon.sh script in shared/lifecycle/.

We're seeing people use Lumier for: - Development and testing environments that need macOS - CI/CD pipelines for Apple platform apps - Disposable macOS instances for security research - Automated UI testing across macOS versions - Running AI agents in isolated environments

Lumier is 100% open-source under the MIT license. We're actively developing it as part of our work on C/ua (https://github.com/trycua/cua), and we'd love your feedback, bug reports, or feature ideas.

We'll be here to answer any technical questions and look forward to your comments!

Comments

mynegation•2h ago
From what I understand VM does _not_ run in docker. The management interface does and connects to the VM running on macOS ARM host via Apple Virtualization Framework.
frabonacci•2h ago
Correct. Docker in this case acts more as a delivery and management plane, rather than providing process isolation. Similar to how dockur/windows or qemus/qemu rely on --device=/dev/kvm to spin up VMs on Linux hosts, we use a background service that interfaces with Apple’s Virtualization Framework (Vz) to provision real VMs on the macOS host. The container connects to this service via host.docker.internal, allowing full interop between the Docker-based interface and the host-based virtualization layer
notpushkin•1h ago
The title is a bit misleading then :)

What’s the difference between this vs just using your lume CLI? Right now it feels like a worse interface to lume, but maybe I’m not getting a use case for this.

Also, any thoughts on https://github.com/cirruslabs/tart? (alas, not open source)

frabonacci•1h ago
You’re right, Lumier might seem similar to Lume CLI, but it adds browser-based desktop streaming via noVNC and integrates with Docker for easier management, which is a familiar interface for many developers. Since our parent project C/ua will use KVM-based containers on x86/x64 hosts, aligning to a container interface here seems a natural step for us. Docker also allows packaging noVNC as a self-contained dependency, streamlining setup for some users.

On a comparison with Tart, UTM, Lima, we actually touch it in this GitHub discussion: https://github.com/trycua/cua/issues/10

notpushkin•22m ago
There’s no mention of Tart in there, but I’ve looked into Lume CLI some more and it seems it’s basically a superset of Tart in functionality. (And both use container registries as the VM image store, neat!)

> aligning to a container interface here seems a natural step for us

It might be tricky since you do have to escape from the container to run the actual VM, though I guess you can figure something out here. I still think it’s the wrong layer to build your abstractions upon, but let’s see how it goes! Just don’t discontinue the CLI, it’s really cool :-)

riffic•19m ago
been a while since it's come up but does Darwin support kernel level containerization yet?

Apple should recognize the use case or utility and run with it.

nottorp•2h ago
So, since the host is mac os, you need to run a linux VM to be able to quickly instantiate a mac os VM?

With Apple's RAM prices?

frabonacci•2h ago
Not quite, there's no need to run a Linux VM on macOS just to spin up macOS VMs.

Since the host is already macOS, we leverage the Apple Virtualization Framework (Vz) directly via a lightweight background service (lume). The Docker container (Lumier) acts purely as a frontend and delivery mechanism for managing and launching VMs — there's no nested virtualization or Linux VM involved.

That said, you're absolutely right that macOS hardware isn’t cheap, and RAM can be a real constraint. If you're running multiple VMs or aiming for production-scale setups, options like Scaleway’s M4 Mac minis or EC2 Mac Metal instances offer more headroom.

Also worth noting: while Lumier supports virtualizing Linux VMs too, if your use case is only Linux, there are far more cost-effective options using KVM on Linux hosts.

notpushkin•1h ago
Docker uses a Linux VM to run on macOS.
RobMurray•1h ago
Docker does seem to be an unnecessary overhead considering it's reliance on a Linux VM. What does Docker bring to the table that couldn't easily be replaced with a native Mac app?
nottorp•1h ago
That was my point, and that was the Linux VM dependency that the OP doesn't realize exists.

Also there's some permanently running service. What's the point, to save 30 milliseconds out of the time to set up a VM which is certainly measured in tens of seconds?

frabonacci•1h ago
The primary benefit here is automation and ease of management, especially for CI or AI agent workflows, rather than saving tiny amounts of time on VM setup. Docker's role is to offer a consistent and familiar management interface, which can be useful for automation and scaling, not for shaving milliseconds off VM boot times
mbreese•17m ago
What I think you’re not addressing is the question about the Linux VM that Docker requires on a Mac. I don’t think there is a question about the benefits of Docker from a management point of view. The question is — is it worth keeping around a running Linux VM just to get those management benefits. Since you’re not actually using Docker (the daemon) to run Macs in a container, how much of that micro Linux VM is necessary? Is that overhead worth it?

(This is coming from someone who keeps colima running all the time on my Mac)

frabonacci•1h ago
Totally get your point. Docker isn’t about performance here. It’s just used as a management interface to connect to VMs running directly on the macOS host via Apple’s Vz. We went with this approach for Lume because Docker offers a familiar, automation-friendly workflow—great for CI, AI agents, and bundling things like noVNC
handfuloflight•2h ago
Would it be possible to spin up VMs inside of a https://aws.amazon.com/ec2/instance-types/mac/?
frabonacci•2h ago
Yes, running virtualized workloads at scale is one of our primary use cases. We're already deploying Lumier-based VMs on macOS GitHub runners, AWS EC2 Mac instances, and Scaleway.

Notably, Scaleway is one of the few providers to offer M4-based Mac minis that support nested virtualization. The main caveat is that these are currently only available in EU regions.

helpfulContrib•2h ago
I already do this with UTM. Whats the difference? Worth converting?
frabonacci•1h ago
A couple of key differences are that Lumier provides browser-based desktop streaming via noVNC and a Docker‑based, CLI/headless management plane - along with both ephemeral and persistent 'containers', which are especially useful for CI or computer-use AI agent workflows and evals.
ChocolateGod•1h ago
So it uses a Docker container (running in a Linux VM) to connect to a VM running on the macOS host.

Seems like pointless overhead.

kelsey98765431•1h ago
how does the docker guest orchestrate a completely different virtualization system? is the guest container in docker given access to the host system to then spin up the apple vm guest? to me this seems very risky in terms of security.
cyberax•28m ago
Super nice! Do you think it's possible to run XCode and do an app build with this approach?