MyBox

About

MyBox is a macOS app and command line tool that runs isolated Debian Linux workspaces on Apple silicon Macs, built on a fork of Apple's container project. Each box has its own Linux kernel, receives copied project files instead of mounts, and is blocked from reaching Mac files, Mac services and the local network. Opening a shell or transferring files requires Touch ID or the Mac password, so software running on the Mac cannot enter a box without approval. This limits the damage a compromised Node.js package could do to the host.