ICYMI: Apple's new native containers start in ~100ms and have better security. I updated to Tahoe just for this.

And it's open-source:

https://github.com/apple/container

It's not really supported before Tahoe, presumably due to required hypervisor support.

Interesting to see this utilizes kata-containers project alongside virtualization.framework. Cool project.

https://github.com/kata-containers/kata-containers/