Docker Desktop is a mature, full-featured platform. For a few local Linux workloads on an Apple Silicon Mac, its managed VM, desktop app, and supporting services may be more than you need.
DOCKER DESKTOP FOR MAC
A complete container workspace
Runtime
Docker Engine inside a Linux VM managed by Docker Desktop. A backend also handles networking, control-plane calls, and host-file access.
Memory
4 GB host RAM minimum. VM memory limit defaults to 50% of host RAM, plus 1 GB swap. On a 16 GB Mac, that is an 8 GB VM limit—not a claim of actual use.
Disk and files
Images and containers live in a VM disk image; its maximum is not the same as space used. Sharing many host files can add CPU and filesystem overhead.
Idle
Resource Saver can power down the VM. Docker documents a 3–10 second restart when it is needed again.
RIFT · SOURCE PREVIEW
A focused runtime for macOS
Runtime
One CLI starts one disposable Linux VM per run through Apple’s Virtualization.framework. No Docker Engine, Docker Desktop, or shared Rift daemon.
Memory
2 vCPU and 256 MiB guest RAM by default. Three idle M2 samples measured a median 154.7 MiB process footprint for the Rift worker and VM service; this excludes kernel and other host memory.
Disk
2.06 MB optimized executable. A measured Homebrew v0.2.0 install plus first-use guest boot files occupied 46.25 MiB, before image downloads.
Startup and files
Cached Alpine launch median: 1.13 seconds on one M2 Mac. Mount only requested host paths; up to 16 volumes and one localhost TCP mapping per run.
Docker Desktop has a broader, mature ecosystem. Rift is an early Apple Silicon preview: linux/arm64 images, a subset of Dockerfile, and no signed or notarized downloads yet. Choose Rift for a small local workflow; use Docker Desktop when your work depends on features Rift does not support.
Docker Desktop is free for personal, education, non-commercial open-source use, and small businesses below both 250 employees and $10 million annual revenue. Larger businesses and government use require a paid subscription under Docker’s license terms.
02 / UNDER THE SURFACE
One command. One disposable Linux VM.
macOS supplies the virtualization layer. Rift assembles a read-only image root, adds a temporary writable layer, then shuts down the guest when the command finishes.
⌘macOS hostRIFT · ZIG
rift run alpine→Virtualization.framework
direct boot
LINUX GUESTprivate namespaces
ROOCI rootVirtioFS share
+
RWtmpfs overlaydiscarded at exit
container processPID · mount · chroot
NO SHARED DAEMONNO HOST PATHS UNLESS MOUNTED
03 / WHAT WORKS TODAY
A real runtime, with its edges in view.
A
OCI, direct from registries
ARM64 manifest selection, Bearer auth, verified blobs and local image storage.
B
Linux process execution
Entrypoint, command, environment, working directory, user and groups; private PID and mount namespaces.
C
Networking and shares
Outbound networking, one localhost TCP port, and explicit read-only or writable file and directory volumes.
D
Detached lifecycle
Run, list containers, read logs, stop or kill a container, and reclaim unreferenced image data.
!
Source preview. Rift runs linux/arm64 images on Apple Silicon, supports a subset of Dockerfile, and forwards one TCP port per run. Signed downloads and an independent security review are still pending.