I built a ~8 MB native Docker app for Apple Silicon Macs — here's how it works

Описание и применение

DockZ – это легковесное приложение (~8 МБ) для Docker на Apple Silicon, использующее Alpine‑VM, vsock‑связь и Secure Enclave для TLS‑ключей, обеспечивая полный совместимость с Docker CLI и удалёнными движками.

Задача

Docker Desktop requires paid licenses for commercial use and is heavy (~1.5 GB) on Apple Silicon Macs.

Результат

DockZ delivers a lightweight, license‑free Docker GUI for Apple Silicon, using a minimal Alpine VM, vsock communication, automatic port forwarding, and Secure Enclave‑protected TLS keys, while maintaining full CLI compatibility.

Рабочий процесс

• 1. Create a macOS Alpine VM using Virtualization.framework.
• 2. Run upstream dockerd inside the VM.
• 3. Register a Docker context named "dockz" so docker CLI, Compose and BuildKit work unchanged.
• 4. Communicate with dockerd over virtio‑vsock (HTTP/1.1) instead of a TCP port.
• 5. Watch Docker events API to automatically forward published container ports to the Mac.
• 6. For remote engines, use docker system dial‑stdio over SSH or a custom TLS relay that uses a Secure Enclave key for client auth.
• 7. Monitor the VM health: ping /_ping every 15 s, restart on failures, limit restarts to 3 per 10 min, and keep recent logs.
• 8. Handle Docker’s "-1" size sentinel by normalizing to "unknown" before arithmetic.

Доказательства

Docker Desktop needs a paid subscription for commercial use at larger companies.

Источник

Docker Desktop felt heavy on my Mac — a ~1.5 GB app and a lot of background activity just to run a few containers.

Источник

The app itself stays small: no bundled Electron runtime, and the guest image is minimal Alpine.

Источник

The private key is created inside the Mac's Secure Enclave (CryptoKit's SecureEnclave.P256.Signing.PrivateKey), protected with Touch ID / user presence.

Источник