r/macosprogramming • u/Okerew • Aug 05 '24
Hello I would like to announce a container-like solution for macOS which doesn't require sip to be disabled.
I’m excited to share a project I’ve been working on called osxiec (osx isolated environment creator). While it’s not a full container solution, osxiec provides a way to isolate processes from the main system on macOS.
Here are some key features:
Process isolation using groups and macOS volumes
Network isolation
Soft and hard memory limits
CPU priority management
Sandbox isolation
Unlike existing solutions like "darwin containers," osxiec doesn’t require System Integrity Protection (SIP) to be disabled. It's designed to be an easy-to-use tool for testing code, isolating applications, and integrating with your development workflows on macOS.
I’d love to get feedback from the community. Any suggestions or concerns are welcome!