I’ve built MyBox to isolate my development projects in Linux containers.
Installing npm modules on my machine didn’t feel right anymore.
MyBox is built on a fork of apple/container.
- Each box has its own Linux kernel.
- Project files get copied into the box (no folder mounts).
- Packet filtering blocks access to the Mac and local network (internet access from the box is allowed).
- Mac apps cannot reach into the box (a dedicated macOS account owns the runtime and virtual disks).
- Touch ID or a password is required to access the box (e.g. opening a shell, importing & exporting files).
I started with a CLI tool, but for convenience I’ve built a desktop app around it.