Docker has always used microVMs (well since 2016)
Docker Desktop for Mac and Windows has used a lightweight, single-purpose VM layer via LinuxKit and hyperkit since 2015, predating modern microVM hype.
summary is enough The post offers interesting historical context on Docker Desktop architecture, but the core claim stretches the definition of microVMs.
summary
Docker staff recount how Docker Desktop for Mac and Windows utilized custom library VMMs and LinuxKit since 2015 to run Linux containers natively. The author argues this lightweight, single-purpose approach matches today's popular microVM trend used for secure workload isolation. This same foundational tech now supports Docker Sandboxes for secure AI agent execution. Commenters heavily push back on the title, noting that standard Linux Docker does not use microVMs and that sharing a single VM kernel differs from true per-workload microVMs like Firecracker.
key points
- Docker Desktop has embedded a minimal library VMM running a slim LinuxKit kernel since 2015.
- This architecture allows Docker Desktop to run rootless on Mac and Windows while limiting attack surfaces.
- The underlying virtualization tech now supports Docker Sandboxes for isolated coding agent execution.
who should read it
Engineers interested in container runtimes, virtualization history, and Docker Desktop internals.
discussion skeptical
consensus
Commenters widely agree the title is misleading clickbait because this architecture only applies to Docker Desktop on macOS and Windows, while standard Linux Docker containers share the host kernel directly.
pushback
A few note that running a lightweight VM layer is still an effective way to harden environments and provide a consistent experience across operating systems lacking native container support.
...*on macOS only and runs qemu as the emulator.
We know. But of course the hype of "microVMs" is just a rebranding of existing technologies with some modifications, macOS needed extra virtualization technologies just for containers for years:
Docker Desktop macOS (until 2025): QEMU + Virtualization.framework + Linux kernel (without extra drivers) = "microVM".
Now they use the native Apple virtualization libraries instead of QEMU for both containers and microVMs. [0] Linux never needed to use KVM for containers, but requires it for microVMs:
Linux: KVM + Linux kernel (without extra …
It details the actual virtualization stack used by Docker Desktop on macOS over the years, clarifying how it differs from Linux KVM microVMs.
Generated by an LLM from the article and thread. Check the sources before relying on it.