Eugene Kalinin
a0421ba3f4
`limactl sudoers` and the generated `networks.yaml` defaulted `group` to `everyone`, which on macOS grants every account (including non-local / directory accounts) permission to run `socket_vmnet` as `root:wheel` and to access the vmnet socket. For the common single-user workstation this is broader than necessary. Change the default to `admin`. It is tighter than `everyone` (and `staff`), and it matches the realistic audience: installing the sudoers file already requires `sudo`, which on macOS is granted to admins by default, so `%admin` covers exactly the users who can use this feature. A non-admin user must set `group` to a group they belong to (e.g. `staff`). Existing `networks.yaml` files are not rewritten, so current installations keep their `everyone` value; the new default only applies to fresh setups. Proper per-user scoping is deferred until `socket_vmnet` gains `--socket-user=USER`. Closes #5118 Signed-off-by: Eugene Kalinin <e.v.kalinin@gmail.com>
[🌎Web site]
[📖Documentation]
[👤Slack (#lima)]
Lima: Linux Machines
Lima launches Linux virtual machines with automatic file sharing and port forwarding (similar to WSL2).
The original goal of Lima was to promote containerd including nerdctl (contaiNERD ctl) to Mac users, but Lima can be used for non-container applications as well.
Lima also supports other container engines (Docker, Podman, Kubernetes, etc.) and non-macOS hosts (Linux, NetBSD, etc.).
Getting started
Set up (Homebrew):
brew install lima
limactl start
To run Linux commands:
lima uname -a
To run containers with containerd:
lima nerdctl run --rm hello-world
To run containers with Docker:
limactl start template:docker
export DOCKER_HOST=$(limactl list docker --format 'unix://{{.Dir}}/sock/docker.sock')
docker run --rm hello-world
To run containers with Kubernetes:
limactl start template:k8s
export KUBECONFIG=$(limactl list k8s --format 'unix://{{.Dir}}/copied-from-guest/kubeconfig.yaml')
kubectl apply -f ...
See https://lima-vm.io/docs/ for the further information.
Contributing
We welcome contributions! Please see our Contributing Guide for details on:
- Developer Certificate of Origin (DCO): All commits must be signed off with
git commit -s - Code licensing and pull request guidelines
- Testing requirements
Community
Adopters
Container environments:
- Rancher Desktop: Kubernetes and container management to the desktop
- Colima: Docker (and Kubernetes) on macOS with minimal setup
- Finch: Finch is a command line client for local container development
- Podman Desktop: Podman Desktop GUI has a plug-in for Lima virtual machines
GUI:
- Lima xbar plugin: xbar plugin to start/stop VMs from the menu bar and see their running status.
- lima-gui: Qt GUI for Lima
Communication channels
- GitHub Discussions
#limachannel in the CNCF Slack- New account: https://slack.cncf.io/
- Login: https://cloud-native.slack.com/
- Zoom meetings (tentatively monthly)
- Meeting notes & agenda proposals: https://github.com/lima-vm/lima/discussions/categories/meetings
- Calendar: https://zoom-lfx.platform.linuxfoundation.org/meetings/lima
Social media accounts
Follow us for project updates, release announcements, and community news:
Code of Conduct
Lima follows the CNCF Code of Conduct.
We are a Cloud Native Computing Foundation incubating project.
The Linux Foundation® (TLF) has registered trademarks and uses trademarks. For a list of TLF trademarks, see Trademark Usage.