Skip to content

docs(platform): freeze apple-container macOS runner — fold RIG-3246 rulings (RIG-3238) #869

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
trunk-io merged 2 commits into from
Sep 6, 2026
+744 −0
Merged

docs(platform): freeze apple-container macOS runner — fold RIG-3246 rulings (RIG-3238) #869

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
2df5aa6
docs(platform): freeze apple-container macOS runner — fold RIG-3246 r…
rigel-mintaka Sep 4, 2026
a6ddf2a
docs(platform): close review findings on the RIG-3246 fold (RIG-3238)
rigel-mintaka Sep 6, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions docs/designs/DECISIONS.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -158,6 +158,10 @@ check enforces the mechanical half. Full rationale:
> prose still cites DL-318 for this row; resolve those stale cites through
> this note (the freeze rule adds, never rewrites frozen prose).

| ID | Decision | Status | Record |
| --- | --- | --- | --- |
| DL-330 | Apple `container` (github.com/apple/container, Apache-2.0) is THE macOS embedded runtime (Matt, RIG-3246): a NEW `AppleContainerCLI` implementation of the frozen `ContainerRuntime` interface behind `SelectBackend` (a distinct non-podman CLI, NOT a `PodmanCLI.WithProgram` swap), with the per-session agent↔host gateway socket riding guest↔host **vsock** mirroring the microVM's guestd forwarder (`go/internal/guestd/gateway_proxy.go:29-33`), the compass-runner staying **host-side (darwin-native)** driving apple-container over vsock (NOT a runner-in-VM — "that's what we do for microVMs anyway too"), and postgres + the OTel collector moving onto apple-container too so macOS carries **NO podman** ("all would be on apple container, no podman"). podman-machine SUNSETS on macOS (interim substrate until the T-5 flip, not a permanent second arm) and Intel + macOS ≤ 15 are OUT OF SCOPE ("Apple has basically ended all support for Intel Macs"). The committed self-hosted Apple-silicon/macOS-26 host (mac mini on Woodpecker) runs the T-1 spike + T-3 live contract suite; hosted arm64 macOS runners cannot (nested-virt unsupported). CONDITIONAL only on the T-1 spike proving the ONE hardware unknown — whether Virtualization.framework's vsock is reachable through the `container` CLI so the guestd-style forwarder ports onto it (plus uid round-trip + streaming-exec fidelity) — spike-now / build-later; a red vsock leg returns the transport question (not the direction) to Matt. EXTENDS the RIG-3070 runner trust-model split (DL-325; apple/container is the macOS-native per-agent VM boundary the split defers). RIG-3238 | Active (Matt, 2026-09-05) | [apple-container macOS runner §Approach](platform/apple-container-macos-runner/design.md#approach) |

## Comms & tools

| ID | Decision | Status | Record |
Expand Down
Loading
Loading