ArcBox

ArcBox is a pure-Rust container and VM runtime aimed at macOS as an open alternative to Docker Desktop and OrbStack. One daemon covers four workload tiers: Docker-compatible containers (and local k3s), agent sandboxes, full Linux machines, and throwaway macOS guests. Sandboxes boot nested Firecracker microVMs inside the guest — each agent gets a real isolation boundary instead of a process jail. Public beta under MIT/Apache-2.0, with a CLI (`abctl`), desktop app, gRPC sandbox API, and a path to pool your own hardware as fleet capacity.

Founders still hand Claude Code and friends the whole laptop, or they rent brittle cloud sandboxes. ArcBox makes isolation the default on the machine you already use: disposable microVMs with their own kernel, filesystem, and network, while still speaking Docker for everyday containers.

Install via Homebrew cask or the get.arcbox.dev script, start the daemon, then `abctl docker enable` so existing Docker CLI and Compose keep working. For agents: set your API key and run `abctl claude` — it builds a sandbox template, attaches your terminal inside Claude Code, and can skip host permission prompts because the microVM is the wall. Or create sandboxes from images/Dockerfiles, exec, copy files, expose ports, checkpoint and restore. Nested virt needs Apple Silicon M3+ and macOS 15+ on the default VZ backend; other hosts fail fast with a clear error.

Not another agent harness and not a closed Mac Docker app. The product story is open local infrastructure: OrbStack-level container UX plus first-class agent microVMs and the same sandbox primitive you can scale later — isolation by kernel, not by vibes.

• API / SDK surface

• OpenWorker ↗
• Cloudflare OS ↗
• Destructive Command Guard ↗