However, unlike Lima, an Apple Container is not a full VM, so you cannot SSH to it, or forward SSH-agent signatures into a machine.

So it's more of a devcontainer story, which is also a great use case. Nice to see Apple creating tooling around their VZ framework.

Edit: referential clarity.

Comments URL: https://news.ycombinator.com/item?id=48260274

Points: 1

# Comments: 0

I realized it’s really not secure to run coding projects directly on my Mac. All the NPM hacks recently, especially with agentic coding — you’re always one npm install away from a disaster.

So I’ve built a small CLI called machine that starts a Lima VM for each of your projects. It supports declarative “profiles” which are like package.json for your VM. The default profile comes with standard stuff like Node.js, git, Docker, Claude Code and Codex.

If you share your projects.toml with your team, every developer can spin up your team’s entire dev environment with one command. No need to install dev tools, clone repos, npm install anything manually.

Another cool thing is that you can use the native MacOS keychain or 1password to forward SSH signatures to the VM. So every time you need to commit or push code, you touch the Touch ID key and it’s signed. SSH keys never leave the host.

The same is done for env variables and secrets. You inject them with one command from 1password when the machine starts and they are never stored in a file.

Repo: https://github.com/katspaugh/machine

Genuinely curious about your feedback!

Comments URL: https://news.ycombinator.com/item?id=48166119

Points: 4

# Comments: 1

Filed an issue here: https://github.com/katspaugh/ichinichi/issues/32

I can see how the month widget can be not useful in the editor view. I’ll add an option to show only the editor and to remember that choice.

Antinote looks awesome! Love how minimalist it is and how they demo all the features on the landing page. I’m going to look into making ichinichi into a desktop app.