# orbstack/orbstack **Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/orbstack-orbstack).** 8,903 stars · 94 forks · Shell · MIT ## Links - GitHub: https://github.com/orbstack/orbstack - Homepage: https://orbstack.dev - awesome-repositories: https://awesome-repositories.com/repository/orbstack-orbstack.md ## Topics `colima` `docker` `docker-desktop` `lima` `linux` `mac` `macos` `utm` `virtual-machine` ## Description OrbStack is a native macOS application that replaces Docker Desktop, providing an all-in-one environment for running Docker containers, full Linux virtual machines, and local Kubernetes clusters. It runs Linux VMs directly on the macOS hypervisor framework for near-native performance, uses VirtioFS for fast bidirectional file sharing between macOS and Linux, and leverages Rosetta for near-native x86 emulation on Apple Silicon. The system assigns predictable local domain names to containers and VMs with automatic HTTPS certificate generation, forwards ports via event-driven updates, and stores Docker registry credentials securely in the macOS keychain. The tool distinguishes itself through deep macOS integration and efficient resource management. It provides a native macOS menu bar interface and GUI for managing containers, volumes, images, and Kubernetes resources, alongside bundled Docker CLI tools that are kept up to date automatically. OrbStack supports running Docker Compose projects with automatic domain names, checkpointing and restoring running containers using CRIU, and running side-by-side with Docker Desktop or Colima using Docker contexts. It can spin up dozens of Linux machines with negligible additional CPU overhead, allocate CPU, memory, and disk on demand, and run multi-service stacks with lower energy consumption than alternative container runtimes. The platform covers container lifecycle management, Linux virtual machine creation and management, local Kubernetes cluster management, and multi-architecture container support. It handles networking with unified bridge networking, host networking, IPv6 support, VPN integration, and automatic proxy forwarding. File sharing works bidirectionally between macOS and containers or Linux machines, with support for bind mounts, volumes, and direct access to image and volume files from the macOS file system. Security features include SSH agent forwarding, passwordless sudo, isolated sandbox environments for untrusted code, and automatic TLS certificate generation for container domains. ## Tags ### DevOps & Infrastructure - [macOS Docker Container Managers](https://awesome-repositories.com/f/devops-infrastructure/container-orchestration/container-runtimes/runtime-configuration-interfaces/docker-socket-orchestrators/docker-target-configurators/docker-container-deployments/docker-container-execution/macos-docker-container-managers.md) — Provides a native macOS GUI and CLI for running Docker containers with Compose, networking, and file sharing. - [Container Bridge Networks](https://awesome-repositories.com/f/devops-infrastructure/cloud-infrastructure/networking-connectivity/container-bridge-networks.md) — Connects containers and machines on bridge networks with NAT, custom DNS, and host networking for direct IP communication. ([source](https://docs.orbstack.dev/architecture)) - [Container and Kubernetes GUIs](https://awesome-repositories.com/f/devops-infrastructure/container-and-kubernetes-guis.md) — Provides a native macOS GUI for managing containers, volumes, and images with near feature parity to Docker Desktop. ([source](https://docs.orbstack.dev/docker/)) - [Multi-Architecture Container Runtimes](https://awesome-repositories.com/f/devops-infrastructure/container-architectures/multi-architecture-container-runtimes.md) — Runs containers for 32-bit and 64-bit ARM and Intel architectures on both Apple Silicon and Intel Macs. ([source](https://docs.orbstack.dev/docker/)) - [macOS Container Network Integrations](https://awesome-repositories.com/f/devops-infrastructure/container-engine-integrations/macos-container-network-integrations.md) — Integrates container networking with macOS via automatic domain names, localhost forwarding, and VPN support. - [Docker-Compatible CLI Tools](https://awesome-repositories.com/f/devops-infrastructure/container-image-registries/registry-discovery/containerd-runtime-discovery/docker-compatible-cli-tools.md) — Use the latest Docker CLI tools, including Compose and buildx, kept up to date automatically. ([source](https://docs.orbstack.dev/docker/)) - [Docker Compose Deployments](https://awesome-repositories.com/f/devops-infrastructure/container-orchestration/container-runtimes/runtime-configuration-interfaces/docker-socket-orchestrators/docker-target-configurators/docker-container-deployments/docker-compose-deployments.md) — Runs complex Docker Compose applications using less energy than other container runtimes. ([source](https://docs.orbstack.dev/benchmarks)) - [Docker Container Execution](https://awesome-repositories.com/f/devops-infrastructure/container-orchestration/container-runtimes/runtime-configuration-interfaces/docker-socket-orchestrators/docker-target-configurators/docker-container-deployments/docker-container-execution.md) — Provides a built-in Docker engine that runs containers with full networking, volume, and port forwarding support. ([source](https://docs.orbstack.dev/install)) - [macOS Docker Desktop Replacements](https://awesome-repositories.com/f/devops-infrastructure/execution-sandboxes/hypervisor-level-docker-sandboxes/docker-in-vm-launchers/macos-docker-desktop-replacements.md) — Replaces Docker Desktop with a native macOS app and CLI for managing containers and Linux VMs. - [Linux Virtual Machine Creators](https://awesome-repositories.com/f/devops-infrastructure/linux-virtual-machine-creators.md) — Creates full Linux virtual machines with a choice of distros in under a minute via GUI or CLI. ([source](https://docs.orbstack.dev/quick-start)) - [Local Kubernetes Clusters](https://awesome-repositories.com/f/devops-infrastructure/local-kubernetes-clusters.md) — Starts a lightweight single-node Kubernetes cluster optimized for development, managed via GUI and CLI. ([source](https://docs.orbstack.dev/kubernetes/)) - [Virtual Machine Managers](https://awesome-repositories.com/f/devops-infrastructure/virtual-machine-managers.md) — Creates and manages full Linux virtual machines on macOS with SSH, file sharing, and USB passthrough. - [Docker Image Builds](https://awesome-repositories.com/f/devops-infrastructure/automated-deployment-pipelines/docker-image-builds.md) — Builds multi-platform Docker images faster than competing tools by optimizing the build pipeline. ([source](https://docs.orbstack.dev/benchmarks)) - [Container Checkpointing](https://awesome-repositories.com/f/devops-infrastructure/container-checkpointing.md) — Save and restore running container state using CRIU with Docker's experimental mode enabled by default. ([source](https://docs.orbstack.dev/docker/)) - [Checkpoint-Based Container Restoration](https://awesome-repositories.com/f/devops-infrastructure/container-images/checkpoint-based-container-restoration.md) — Saves and restores running container state using checkpoint/restore in userspace for seamless state preservation. - [Container Restoration](https://awesome-repositories.com/f/devops-infrastructure/container-restoration.md) — Checkpoints and restores running containers using CRIU to preserve their state for later use. ([source](https://docs.orbstack.dev/docker/)) - [Multi-Platform Builds](https://awesome-repositories.com/f/devops-infrastructure/containerization/image-building/multi-platform-builds.md) — Build container images for different CPU architectures in parallel using a single command. ([source](https://docs.orbstack.dev/docker/images)) - [Custom Domain Mappings](https://awesome-repositories.com/f/devops-infrastructure/custom-domain-mappings.md) — Maps user-specified domain names to containers via labels, including wildcard support for subdomain routing. ([source](https://docs.orbstack.dev/docker/domains)) - [Kubernetes Cluster Management](https://awesome-repositories.com/f/devops-infrastructure/kubernetes-cluster-management.md) — Start, stop, restart, and delete a Kubernetes cluster using simple command-line commands. ([source](https://docs.orbstack.dev/kubernetes/)) - [Local Image Pod Loaders](https://awesome-repositories.com/f/devops-infrastructure/local-kubernetes-clusters/pod-context-development/local-image-pod-loaders.md) — Makes locally built images immediately available to Kubernetes pods without pushing to a registry. ([source](https://docs.orbstack.dev/kubernetes/)) - [Host-Guest File Sharing Platforms](https://awesome-repositories.com/f/devops-infrastructure/unified-container-and-vm-platforms/host-guest-file-sharing-platforms.md) — Shares files between macOS and containers or Linux VMs using VirtioFS and automatic mount points. - [Virtual Machine Resource Limiters](https://awesome-repositories.com/f/devops-infrastructure/virtual-machine-resource-limiters.md) — Restricts machine memory, CPU, and disk usage at creation or later via app or configuration commands. ([source](https://docs.orbstack.dev/machines/)) ### Part of an Awesome List - [File Sync And Sharing](https://awesome-repositories.com/f/awesome-lists/devtools/file-sync-and-sharing.md) — Maps files between macOS and Linux at predictable paths so both systems can read and write the same data. ([source](https://docs.orbstack.dev/quick-start)) - [BuildKit-Based Builds](https://awesome-repositories.com/f/awesome-lists/devtools/image-build-and-analysis/custom-image-builds/buildkit-based-builds.md) — Use the modern BuildKit backend to build images faster by running stages in parallel. ([source](https://docs.orbstack.dev/docker/images)) ### Development Tools & Productivity - [Container and VM CLI Management Tools](https://awesome-repositories.com/f/development-tools-productivity/container-and-vm-cli-management-tools.md) — Run orb and orbctl commands alongside bundled Docker CLI tools to manage Linux machines and containers. ([source](https://docs.orbstack.dev/install)) - [Host-Guest CLI and File System Integrations](https://awesome-repositories.com/f/development-tools-productivity/host-guest-cli-and-file-system-integrations.md) — Access command-line tools and share files between macOS and running containers or virtual machines. ([source](https://cdn.jsdelivr.net/gh/orbstack/orbstack@main/README.md)) ### Networking & Communication - [Container Port Mapping](https://awesome-repositories.com/f/networking-communication/container-port-mapping.md) — Maps container ports to the macOS host so services are accessible on localhost or specific network interfaces. ([source](https://docs.orbstack.dev/docker/network)) - [Automatic Domain Name Resolutions](https://awesome-repositories.com/f/networking-communication/domain-name-systems/automatic-domain-name-resolutions.md) — Assigns predictable local domain names to containers and VMs with automatic HTTPS certificate generation. - [Container Domain Name Assignments](https://awesome-repositories.com/f/networking-communication/domain-name-systems/container-domain-name-assignments.md) — Assigns custom domain names to containers and Linux machines with automatic HTTPS and wildcard support. ([source](https://docs.orbstack.dev/compare/docker-desktop)) - [Container Domain Name Resolutions](https://awesome-repositories.com/f/networking-communication/domain-name-systems/domain-name-purchases/container-domain-name-resolutions.md) — Resolves each container to a predictable domain name like container-name.orb.local, eliminating the need to remember port numbers. ([source](https://docs.orbstack.dev/docker/domains)) - [Container Bind Mounts](https://awesome-repositories.com/f/networking-communication/file-sharing/container-bind-mounts.md) — Shares files bidirectionally between macOS and containers using bind mounts, volumes, and direct filesystem access. ([source](https://docs.orbstack.dev/compare/colima)) - [Host-to-Guest](https://awesome-repositories.com/f/networking-communication/file-transfers/host-to-guest.md) — Shares files bidirectionally between macOS and Linux machines using VirtioFS with dynamic caching. ([source](https://docs.orbstack.dev/machines/)) - [Container Traffic Forwarders](https://awesome-repositories.com/f/networking-communication/ip-forwarding/local-network-traffic-forwarders/container-traffic-forwarders.md) — Routes container and VM traffic through HTTP(S) and SOCKS proxies with VPN compatibility and macOS DNS integration. ([source](https://docs.orbstack.dev/compare/colima)) - [Host-to-Guest File Sharing](https://awesome-repositories.com/f/networking-communication/network-file-sharing/host-to-guest-file-sharing.md) — Shares files quickly in both directions between macOS and Linux containers or machines using VirtioFS with dynamic caching. ([source](https://docs.orbstack.dev/architecture)) - [Service Port Forwarding](https://awesome-repositories.com/f/networking-communication/service-port-forwarding.md) — Forwards container and machine ports to macOS localhost instantly via event-based port forwarding. ([source](https://docs.orbstack.dev/architecture)) - [Container Traffic Proxies](https://awesome-repositories.com/f/networking-communication/traffic-proxying/container-traffic-proxies.md) — Routes container traffic through HTTP(S) and SOCKS proxies with VPN compatibility and macOS DNS integration. ([source](https://docs.orbstack.dev/compare/docker-desktop)) - [Unified Bridge Networks](https://awesome-repositories.com/f/networking-communication/containerized-network-bridges/unified-bridge-networks.md) — Connects containers and VMs on a single bridge network with NAT, custom DNS, and host networking support. - [Container-to-Host Service Access](https://awesome-repositories.com/f/networking-communication/host-networking-services/container-to-host-service-access.md) — Reaches services running on the Mac from a container via localhost, removing the need for host.docker.internal. ([source](https://docs.orbstack.dev/docker/host-networking)) - [Container IP Assignments](https://awesome-repositories.com/f/networking-communication/ip-address-management-systems/static-ip-enforcement/device-ip-assignments/container-ip-assignments.md) — Connects to containers from macOS using their assigned IP addresses without setting up port forwards. ([source](https://docs.orbstack.dev/docker/network)) - [VPN-Routed Container Traffic](https://awesome-repositories.com/f/networking-communication/network-infrastructure-routing/network-routing-traffic-management/network-traffic-management/container-traffic-forwarding/vpn-routed-container-traffic.md) — Passes container network traffic through the system VPN without extra configuration. ([source](https://docs.orbstack.dev/docker/network)) - [Event-Driven Port Forwardings](https://awesome-repositories.com/f/networking-communication/network-port-forwarding/port-forwarding-event-handlers/event-driven-port-forwardings.md) — Forwards container and VM ports to macOS instantly using event-driven updates instead of polling. - [Kubernetes Service Domain Resolutions](https://awesome-repositories.com/f/networking-communication/networking/custom-domains/cluster-domain-configurations/kubernetes-service-domain-resolutions.md) — Resolves standard Kubernetes cluster domains and exposes LoadBalancer or Ingress services under a dedicated domain. ([source](https://docs.orbstack.dev/docker/domains)) - [Kubernetes Service Direct Accessors](https://awesome-repositories.com/f/networking-communication/service-port-forwarding/kubernetes-service-direct-accessors.md) — Reaches all Kubernetes service types from the host without port forwarding. ([source](https://docs.orbstack.dev/kubernetes/)) - [System Proxy Forwarders](https://awesome-repositories.com/f/networking-communication/traffic-tunneling/http-tunneled-socks-proxies/http-proxy-forwarders/system-proxy-forwarders.md) — Forwards container traffic through the macOS proxy automatically, supporting HTTP, HTTPS, and SOCKS proxies. ([source](https://docs.orbstack.dev/docker/network)) - [Multiplexed SSH Gateways](https://awesome-repositories.com/f/networking-communication/virtual-machine-ssh-jump-hosts/multiplexed-ssh-gateways.md) — Uses a single built-in SSH server that multiplexes access to all running Linux machines without per-machine SSH setup. ([source](https://docs.orbstack.dev/machines/)) ### Operating Systems & Systems Programming - [Linux Distribution Container Execution](https://awesome-repositories.com/f/operating-systems-systems-programming/custom-linux-distributions/linux-distribution-container-execution.md) — Starts Docker containers and full Linux distributions in seconds with minimal overhead. ([source](https://docs.orbstack.dev)) - [Guest Host Filesystem Sharing](https://awesome-repositories.com/f/operating-systems-systems-programming/guest-host-filesystem-sharing.md) — Shares files bidirectionally between macOS and containers or Linux machines without manual configuration. ([source](https://docs.orbstack.dev/compare/utm)) - [Dynamic Resource Allocators](https://awesome-repositories.com/f/operating-systems-systems-programming/kernel-core-internals/system-resource-management/dynamic-resource-allocators.md) — Allocates CPU, memory, and disk on demand, returning unused resources to the host OS to keep overhead minimal. ([source](https://docs.orbstack.dev/efficiency)) - [Container Volume Bindings](https://awesome-repositories.com/f/operating-systems-systems-programming/system-administration-maintenance/file-system-management/file-system-integration/host-to-guest-file-sharing/container-volume-bindings.md) — Shares macOS files with containers via bind mounts and provides persistent volumes accessible from both sides. ([source](https://docs.orbstack.dev/docker/file-sharing)) - [VirtioFS Shared Directories](https://awesome-repositories.com/f/operating-systems-systems-programming/system-administration-maintenance/file-system-management/file-system-integration/host-to-guest-file-sharing/virtiofs-shared-directories.md) — Shares files between macOS and Linux using VirtioFS with dynamic caching for fast bidirectional access. - [Apple Rosetta Translation](https://awesome-repositories.com/f/operating-systems-systems-programming/virtualization-emulation/virtualization-platforms/virtualization-platforms/cross-architecture-virtualization/binary-translation-layers/apple-rosetta-translation.md) — Emulates Intel architecture on Apple Silicon using Rosetta for near-native x86 container and VM performance. - [Hardware-Accelerated Hypervisors](https://awesome-repositories.com/f/operating-systems-systems-programming/virtualization-emulation/virtualization-platforms/virtualization-technologies/hardware-accelerated-hypervisors.md) — Runs Linux VMs directly on the macOS hypervisor framework for near-native performance with minimal overhead. - [Linux Provisioning](https://awesome-repositories.com/f/operating-systems-systems-programming/virtualization-emulation/virtualization-platforms/virtualization-technologies/virtual-machines/linux-provisioning.md) — Creates and destroys full Linux machines in under a minute, supporting multiple init systems and distros. ([source](https://docs.orbstack.dev/architecture)) - [Lightweight Linux Virtual Machines](https://awesome-repositories.com/f/operating-systems-systems-programming/virtualization-emulation/virtualization-platforms/virtualization-technologies/virtual-machines/linux-provisioning/lightweight-linux-virtual-machines.md) — Spins up dozens of virtual machines with negligible additional CPU overhead beyond the base system. ([source](https://docs.orbstack.dev/efficiency)) - [x86-on-ARM64 Emulation](https://awesome-repositories.com/f/operating-systems-systems-programming/x86-on-arm64-emulation.md) — Emulates Intel architecture on Apple Silicon using Rosetta for near-native x86 container performance. ([source](https://docs.orbstack.dev/docker/)) - [Rosetta x86 Emulations](https://awesome-repositories.com/f/operating-systems-systems-programming/apple-silicon-virtualization/rosetta-x86-emulations.md) — Executes Intel-architecture programs on Apple Silicon Macs using Rosetta for near-native performance. ([source](https://docs.orbstack.dev/machines/)) - [Linux Sandboxes](https://awesome-repositories.com/f/operating-systems-systems-programming/linux-sandboxes.md) — Runs Linux machines without macOS integration to provide a sandboxed environment for untrusted code. ([source](https://docs.orbstack.dev/architecture)) ### Security & Cryptography - [VM-Backed Container Runtimes](https://awesome-repositories.com/f/security-cryptography/security/policies/capability-authorization/capability-based-security/container-privilege-restrictions/lightweight-container-runtimes/vm-backed-container-runtimes.md) — Runs Docker containers inside a lightweight VM, sharing resources with Linux machines to minimize overhead. ([source](https://docs.orbstack.dev/architecture)) - [Code Sandboxing Environments](https://awesome-repositories.com/f/security-cryptography/application-and-system-security/sandbox-and-isolation/code-sandboxing-environments.md) — Creates isolated Linux environments with USB passthrough to safely execute untrusted code. ([source](https://docs.orbstack.dev)) - [Host-to-Container Credential Forwarding](https://awesome-repositories.com/f/security-cryptography/host-to-container-credential-forwarding.md) — Forwards the Mac's SSH agent into containers for secure key-based authentication, such as for Git operations. ([source](https://docs.orbstack.dev/compare/docker-desktop)) - [SSH Agent Integrations](https://awesome-repositories.com/f/security-cryptography/identity-access-management/authentication-strategies/machine-and-protocol-identity/specialized-authentication-protocols/agent-authentication-strategies/ssh-agent-integrations.md) — Forwards the host's SSH agent into Linux machines automatically so Git and SSH connections work without extra setup. ([source](https://docs.orbstack.dev/machines/)) - [Automatic Container HTTPS](https://awesome-repositories.com/f/security-cryptography/network-infrastructure-security/web-network-security/security-https/automatic-container-https.md) — Generates and installs TLS certificates automatically for all container domains, enabling secure connections without manual setup. ([source](https://docs.orbstack.dev/docker/domains)) - [Container Domain HTTPS](https://awesome-repositories.com/f/security-cryptography/reverse-proxy-security/self-hosted-https-configurations/local-development-https/container-domain-https.md) — Generates and installs TLS certificates automatically for container domains, enabling secure HTTPS without manual setup. ([source](https://docs.orbstack.dev/docker/domains)) - [Secure SSH Access](https://awesome-repositories.com/f/security-cryptography/secure-ssh-access.md) — Connects to a running Linux machine over SSH using a simple alias, with agent forwarding enabled. ([source](https://docs.orbstack.dev/quick-start)) ### User Interface & Experience - [Graphical User Interfaces](https://awesome-repositories.com/f/user-interface-experience/graphical-user-interfaces.md) — Ships a native macOS GUI for managing containers, machines, and Kubernetes resources. ([source](https://docs.orbstack.dev/compare/colima)) ### Data & Databases - [Build Result Caches](https://awesome-repositories.com/f/data-databases/data-engineering-infrastructure/caching-performance/caching-strategies/query-result-caching/method-result-caches/build-result-caches.md) — Stores intermediate build results to speed up future builds and automatically removes unused cache. ([source](https://docs.orbstack.dev/docker/images)) ### Programming Languages & Runtimes - [Multi-Architecture Emulations](https://awesome-repositories.com/f/programming-languages-runtimes/webassembly-binary-manipulators/64-bit-memory-support/32-64-bit-architecture-support/multi-architecture-emulations.md) — Runs programs built for 32/64-bit ARM and Intel architectures on both Apple Silicon and Intel Macs. ([source](https://docs.orbstack.dev/machines/)) ### System Administration & Monitoring - [Container-to-Host Service Connections](https://awesome-repositories.com/f/system-administration-monitoring/administrative-operations/linux-system-administration/networking/connection-lifecycle-management/connection-pooling/container-host-connections/container-to-host-service-connections.md) — Uses a special domain that lets containers reach servers running on the macOS host. ([source](https://docs.orbstack.dev/docker/network)) - [Menu Bar Utilities](https://awesome-repositories.com/f/system-administration-monitoring/menu-bar-utilities.md) — View, start, stop, and explore containers, volumes, and images through a native macOS menu bar interface. ([source](https://cdn.jsdelivr.net/gh/orbstack/orbstack@main/README.md)) - [Container and VM Menu Bar Managers](https://awesome-repositories.com/f/system-administration-monitoring/menu-bar-utilities/container-and-vm-menu-bar-managers.md) — Ships a native macOS menu bar interface for managing containers, Kubernetes clusters, and Linux distros. ([source](https://docs.orbstack.dev)) - [Host Network Mode Containers](https://awesome-repositories.com/f/system-administration-monitoring/network-connectivity-monitoring/container-network-connection-tracers/host-network-mode-containers.md) — Shares the host's network stack with a container so all ports are automatically exposed on localhost. ([source](https://docs.orbstack.dev/docker/network)) - [Resource Usage Limiters](https://awesome-repositories.com/f/system-administration-monitoring/resource-usage-limiters.md) — Sets configurable caps on CPU and memory consumption to prevent a single workload from starving other processes. ([source](https://docs.orbstack.dev/efficiency)) ### Web Development - [Custom Domain Hosting](https://awesome-repositories.com/f/web-development/custom-domain-hosting.md) — Maps user-defined domain names and wildcards to containers via Docker labels, mirroring production host layouts. ([source](https://docs.orbstack.dev/docker/domains)) - [Docker Context Switchers](https://awesome-repositories.com/f/web-development/server-side-frameworks/server-side-runtimes/side-by-side-runtimes/docker-context-switchers.md) — Enables running OrbStack alongside Docker Desktop or Colima by switching Docker contexts per command. ([source](https://docs.orbstack.dev/install))