Cyber security professionals and researchers can now launch black linux in a virtual container on Macos Sequoia using Apple’s new containerization structure.
During WWDC 2025, Apple announced A new containerization framework that allows the Apple silicon hardware to run separate Linux Distroses in its virtuous environment, similar to the Microsoft Windows Subcistom for Linux 2 (WSL2).
To begin with, user can install user on Macos Sequoia with Apple silicon Container CLI Inchelize the container framework of Apple via Homebrev:
brew install --cask container
container system start
Then you can launch black linux using the following command, which loads the container Dokarb container library And a Macos executes inside the VM.
container run --rm -it kalilinux/kali-rolling
You can use a container to mount a local directory in Kali VM such as with a command:
container run --remove --interactive --tty --volume $(pwd):/mnt --workdir /mnt docker.io/kalilinux/kali-rolling:latest
This command allows you to access files on host devices from within the container.
However, there are some limitations for new convenience, as it is only available on Apple Silicon and does not support Intel Mac.
In addition, the black team reports that there are some bugs with new implementation around networking.
“Currently one Some known limitations of containerization, especially using Macos “Sequoia” 15Such as Container’s network access is not getting IP address or any network access“Reads Kali announcement,
“If you run into these issues, we recommend reading and following Apple’s advice.”
Cyber Security Professional Taha East Also warns Some black uses use cases that require hardware passion and will not work due to the separation of the container from the hardware.
The ability to quickly launch black linux in McOS, even if in the virtual environment, and with some limitations, it becomes easier for the MAC users to conduct safety tests.
Include emerging hazards in real time – before they affect your business.
Learn how cloud detection and response (CDR) gives security teams the required edge in this practical, no-nonsense guide.
