') + ')', 'gi'); if (regex.test(text)) { found = true; var frag = document.createDocumentFragment(); var parts = text.split(regex); parts.forEach(function(part, i) { if (i % 2 === 0) { frag.appendChild(document.createTextNode(part)); } else { var span = document.createElement('span'); span.className = 'userscript-highlight'; span.textContent = part; frag.appendChild(span); } }); node.parentNode.replaceChild(frag, node); } }); } else if (node.nodeType === 1 && node.childNodes) { // element var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT']; if (!skipTags.includes(node.tagName)) { Array.from(node.childNodes).forEach(highlight); } } } highlight(document.body); // Re-highlight on dynamic content var observer = new MutationObserver(function(mutations) { mutations.forEach(function(m) { m.addedNodes.forEach(function(node) { if (node.nodeType === 1 || node.nodeType === 3) highlight(node); }); }); }); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ', 'i'); if (__m === '*' || __re.test(location.href)) { // Strip utm_, fbclid, gclid, etc. from all links on page (function() { var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content', 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid', 'ref', 'ref_src', 'source', 'medium', 'campaign']; function cleanUrl(url) { try { var u = new URL(url, window.location.origin); var changed = false; trackingParams.forEach(function(p) { if (u.searchParams.has(p)) { u.searchParams.delete(p); changed = true; } }); return changed ? u.toString() : url; } catch (e) { return url; } } function cleanLinks() { document.querySelectorAll('a[href]').forEach(function(a) { var clean = cleanUrl(a.href); if (clean !== a.href) a.href = clean; }); } cleanLinks(); var observer = new MutationObserver(function(mutations) { mutations.forEach(function(m) { m.addedNodes.forEach(function(node) { if (node.nodeType === 1) { if (node.tagName === 'A') cleanLinks(); node.querySelectorAll('a[href]').forEach(function(a) { var clean = cleanUrl(a.href); if (clean !== a.href) a.href = clean; }); } }); }); }); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); } })(); (function(){ try { var __m = "youtube.com"; var __re = new RegExp('^' + "youtube\\.com" + ', 'i'); if (__m === '*' || __re.test(location.href)) { // Auto-enable theater mode on YouTube (function() { function tryTheater() { var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]'); if (btn && !btn.classList.contains('activated')) { btn.click(); } } // Try immediately tryTheater(); // Try after navigation (SPA) var lastUrl = location.href; setInterval(function() { if (location.href !== lastUrl) { lastUrl = location.href; setTimeout(tryTheater, 500); } }, 1000); // Also try on player load var observer = new MutationObserver(tryTheater); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ', 'i'); if (__m === '*' || __re.test(location.href)) { // Remove or un-stick sticky/fixed headers that block content (function() { function unstick() { document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) { if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') { el.style.position = 'static'; el.style.top = 'auto'; el.style.zIndex = 'auto'; } }); } unstick(); var observer = new MutationObserver(unstick); observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] }); })(); } } catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); } })(); })(); GitHub - AntApper/ShibaStack: Native, Docker-free container manager for Apple Silicon. Runs OCI containers on Apple's container runtime with a SwiftUI dashboard, live stats, user-space DNS + reverse proxy (*.apc.local), and a Docker-CLI-compatible socket. · GitHub
Skip to content
BranchesTags

Repository files navigation

ShibaStack — Native containers on Apple Silicon

Native, Docker-free container manager for Apple Silicon.
Runs OCI containers on Apple's container runtime — with a SwiftUI dashboard, live stats, user-space DNS + reverse proxy, and a Docker-CLI-compatible socket.

License: BSL 1.1Apple Silicon, macOS 15+Apple container runtime

ShibaStack is a native macOS app and CLI suite for managing Linux containers on Apple Silicon using Apple's own container runtime — no Docker daemon required. It adds a polished SwiftUI dashboard and menu-bar app, a zero-sudo user-space network layer that gives every container a friendly *.apc.local domain, and a Docker-API-compatible socket so existing Docker tooling can talk to the Apple-container engine.

The container engine is only Apple's container (/usr/local/bin/container). "Docker" appears here in just two places: the default image-registry hostname docker.io (Docker Hub), and an optional compatibility socket that translates Docker API calls into container commands. There is no Docker daemon.

Features

  • Real OCI containers on Apple's runtime — create, run, exec, inspect, start/stop/delete, all driven through Apple's container CLI. Container, image, and volume lists are live.
  • Live resource metrics — real per-container CPU + memory sampled from the guest cgroup, plus real host CPU, shown live in the dashboard.
  • Streaming logs & in-container shell — follow container logs -f live, and run a shell directly inside the selected container via container exec.
  • Container filesystem & inspect — browse the real container root filesystem, and view real inspect output including environment variables and mounts.
  • Zero-privilege networking — a user-space UDP DNS resolver for *.apc.local and an HTTP reverse proxy with a loop guard, no root or sudo. Service status is probed live, not assumed.
  • Docker-CLI compatibility — a ~/.apc/docker.sock bridge translates Docker API requests into container commands, so docker ps, Testcontainers, and similar tools work against the Apple engine.
  • Native SwiftUI app + menu bar — a multi-pane dashboard with container, image, and volume managers, and a menu-bar controller.

Requirements

  • Apple Silicon Mac, macOS 15 or later
  • Apple's container runtime at /usr/local/bin/container — apple/container releases
  • Go and the Xcode / Swift toolchain (to build from source)

Honest status

ShibaStack drives a real OCI runtime. Two areas are limited by the platform, and the UI says so plainly:

  • Virtualization VM — running a VM through Virtualization.framework needs Apple's restricted com.apple.security.virtualization entitlement. On ad-hoc-signed development builds the VM lifecycle falls back to a local agent; container operations stay real because Apple's container already runs each container in its own lightweight VM.
  • USB passthrough — host USB scanning is real (IOKit). Attaching a device to a guest requires a running VM with the entitlement; when unavailable the UI disables it and explains why instead of faking success.

Build

git clone https://github.com/AntApper/ShibaStack.git
cd ShibaStack
./scripts/build-dmg.sh

This compiles apc-core (Swift), apc-network and guest-vminitd (Go), and the SwiftUI app, then packages ShibaStack.dmg in the repo root. Open it and drag ShibaStack.app into /Applications.

CLI

The suite ships an apc command-line helper:

# Hypervisor / engine
apc start
apc stop
apc status
# Containers
apc ps
apc run <name><image><hostPort>:<containerPort>
apc logs <name># USB accessories (scan is live; attach needs a running VM)
apc usb list
# Reclaim unreferenced image layers
apc prune

Project structure

.
├── apc-core # Swift package: container/VM/USB/VSOCK managers + apc CLI + daemon
│ └── Sources/APCCore # ContainerManager, VMManager, USBManager, NetworkStatus, models, ...
├── apc-gui # SwiftUI macOS dashboard & menu-bar app (main.swift)
├── apc-network # Go user-space DNS, reverse proxy (RoutingRegistry), docker.sock bridge
├── guest-vminitd # Go guest agent (VSOCK exec spine)
├── docs # ARCHITECTURE.md, DEVELOPER.md, BRANDING.md
└── scripts # build-dmg.sh, integration / stress / GUI tests

Documentation

License

ShibaStack is source-available under the Business Source License 1.1: you may use, modify, and self-host it freely, including in production. The only reserved use is offering it to third parties as a competing commercial or hosted container-management product/service. Each released version automatically converts to the Apache License 2.0 on its Change Date (2030-06-14).

About

Native, Docker-free container manager for Apple Silicon. Runs OCI containers on Apple's container runtime with a SwiftUI dashboard, live stats, user-space DNS + reverse proxy (*.apc.local), and a Docker-CLI-compatible socket.

Resources

Readme
License
Activity

Stars

0 stars

Watchers

0 watching

Forks

0 forks
Report repository

Releases

Packages

Contributors

Languages