We rebuilt the Linux MicroVM stack on Apple Silicon

I just encountered the `com.apple.private.virtualization` entitlement limitation just last night, wanting to use VZVirtualMachine private AccessorEndpoint api. There's lot of useful stuff hidden in Apple's Private API space.

Great write up! I enjoy seeing others working in the same problem space.

Re: We rebuilt the Linux MicroVM stack on Apple Silicon

#5

Post by jdub » Fri, Aug 21, 2026, 8:31 AM UTC

huerne wrote: post #2

VZ.framework is very limited, Hypervisor.framework is the better analogue to KVM

Virtualization.framework isn't particularly limited, for what it is... given they're using Firecracker on Linux, it makes sense to use a similarly high level API on macOS.

(One could add a Hypervisor.framework backend to Firecracker, though I'd be surprised if AWS accepted it.)

Re: We rebuilt the Linux MicroVM stack on Apple Silicon

#6

Post by bit_rot73 » Fri, Aug 21, 2026, 8:33 AM UTC

Four years on a shared remote machine before building the local backend is a good lesson in when to invest in dev tooling versus living with the workaround.

Re: We rebuilt the Linux MicroVM stack on Apple Silicon

#7

Post by rob_c » Fri, Aug 21, 2026, 8:43 AM UTC

kombine wrote: post #3

> most engineers at Encore develop on a Mac They are solving the wrong problem.

No, they're realists.

Plus show me an off the shelf solution to MDM that exists in the Linux space? (Not too mention an easy to buy consumer devices which supports suspend/resume correctly in 2026, not even Windows can do that any more)

Apple is crap and evil about many things, but at least here they know their paying audience...

Re: We rebuilt the Linux MicroVM stack on Apple Silicon

#8

Post by mhast » Fri, Aug 21, 2026, 8:52 AM UTC

rob_c wrote: post #7

kombine wrote: post #3

> most engineers at Encore develop on a Mac They are solving the wrong problem.

No, they're realists. Plus show me an off the shelf solution to MDM that exists in the Linux space? (Not too mention an easy to buy consumer devices which supports suspend/resume correctly in 2026, not even Windows can do that any more) Apple is crap and evil about many things, but at least here they know their paying audience...

One case where Apple can be very useful is if you're traveling a lot for work.

Wherever you are you can probably find a local store that sells and services Macbooks. So if your machine is damaged during a trip you can get it fixed, or buy a replacement on the spot, and at least get through the work you are there to do.

For small-ish companies that can be a very useful feature.

Re: We rebuilt the Linux MicroVM stack on Apple Silicon

#9

Post by asdf88990 » Fri, Aug 21, 2026, 8:53 AM UTC

rob_c wrote: post #7

kombine wrote: post #3

> most engineers at Encore develop on a Mac They are solving the wrong problem.

No, they're realists. Plus show me an off the shelf solution to MDM that exists in the Linux space? (Not too mention an easy to buy consumer devices which supports suspend/resume correctly in 2026, not even Windows can do that any more) Apple is crap and evil about many things, but at least here they know their paying audience...

Lots of Lenavo laptops do just fine, but Apple hardware is still supreme for what it is worth.

Re: We rebuilt the Linux MicroVM stack on Apple Silicon

#10

Post by elAhmo » Fri, Aug 21, 2026, 9:02 AM UTC

mhast wrote: post #8

rob_c wrote: post #7

Earlier quoted context omitted.

No, they're realists. Plus show me an off the shelf solution to MDM that exists in the Linux space? (Not too mention an easy to buy consumer devices which supports suspend/resume correctly in 2026, not even Windows can do that any more) Apple is crap and evil about many things, but at least here they know their paying audience...

One case where Apple can be very useful is if you're traveling a lot for work. Wherever you are you can probably find a local store that sells and services Macbooks. So if your machine is damaged during a trip you can get it fixed, or buy a replacement on the spot, and at least get through the work you are there to do. For small-ish companies that can be a very useful feature.

Buying on the spot - sure. Anything that requires repair has to be usually booked in advance with some waiting time. Relatively short, usually days, but still not really possible to go into the store and get your laptop fixed right away in most cases.