A fresh Linux VM on your Mac in half a second. Throwaway sandboxes for coding agents on Apple Silicon, with credentials brokered from the Mac.
https://sovyn-eu.github.io/skiff/ β HEALTH ? 89 / Healthy
// readme
skiff β a fresh Linux VM on your Mac in half a second
skiff gives you throwaway Linux VMs on Apple Silicon, one per task or coding
agent: skiff new dev boots an Ubuntu 24.04 VM with its own kernel, disk, IP
and root SSH in about two seconds (the boot itself takes half a second), and
skiff rm dev throws it away. Credentials the agent needs stay on the Mac and
reach the VM through a broker, never as copies.
macOS (skiff)
βββ VM dev (Virtualization.framework via Apple's `container`, 192.168.64.x, ssh dev.skiff)
βββ VM ai (β¦) βββ relay: localhost:3000 β ai:3000
βββ broker (credentials, MCP servers, audit log) βββ ssh -R tunnel per session
Each VM is a container machine: a Virtualization.framework VM driven by
Appleβs container CLI. There is no
nested virtualization and no shared runtime VM, so JIT-heavy workloads such as
Claude Code run at Mac speed. The host side is one Go binary; the guest is a
plain Ubuntu image with systemd, sshd and skiffβs key.
Requirements
- Apple Silicon (any generation)
- macOS 26 or newer (what Appleβs
containersupports) - Homebrew (skiffβ¦