Back to directory

Dory

A native local-development system for Apple Silicon combining Docker, Compose, one-click Kubernetes, full graphical Linux virtual machines and policy-bound coding-agent sandboxes, without requiring Docker Desktop.

Dory

Dory gives Apple Silicon Macs a native container and virtualization runtime for local software development: the Docker API and CLI, Buildx, BuildKit and Compose v2 with registries, bind mounts, volumes and custom networks; one-click k3s Kubernetes across several selectable versions with a native resource browser; and full Linux virtual machines, including Ubuntu, Debian and Kali graphical desktops plus lightweight Alpine headless VMs, with configurable resources, scoped mounts, snapshots, cloning, import and export. It also adds policy-bound sandboxes for coding agents.

It can transactionally migrate containers, images and configuration from Docker Desktop, OrbStack, Colima, Rancher Desktop, Podman or another Docker-compatible socket, reporting exactly what was selected, verified or omitted. All workload data is stored locally in one managed drive file or on an external APFS drive, with no required account, cloud control plane or telemetry.

It is operable from both a native SwiftUI app and a versioned command-line interface, is GPL-3.0 licensed, and currently targets Apple Silicon only, with Intel support planned later.

More in Containers

See all 120
  • Drop

    droprun.sh

    A rootless Linux sandbox for developers, built on user namespaces with optional gVisor isolation, that confines coding agents and third-party packages without leaving your normal work environment.

  • minienv

    github.com

    Reads an existing docker compose file and deploys it as a remote preview environment with little setup, with optional public endpoints and authentication so others can review in-flight work.

  • Rig

    npmjs.com

    Gives each coding agent, such as Claude Code, Cursor or Codex, its own cloud Linux desktop with a running dev server, tests and a signed-in Chrome, so the developer's laptop stays free while several agents work at once.