macOS Sequoia Unleashes Native Linux Containers: Kali Linux Now Runs Natively on Apple Silicon

During WWDC 2025, Apple unveiled a new containerization framework that allows applications to run in isolated containers on macOS Sequoia, leveraging hardware-assisted virtualization. This design bears a conceptual resemblance to Microsoft’s Windows Subsystem for Linux 2 (WSL2).

Kali Linux, the renowned distribution tailored for cybersecurity professionals and researchers, has now released a containerized version compatible with Mac. This enables users to run Kali Linux without the need to install a dedicated virtual machine, offering a significantly more streamlined and convenient experience.

To begin using the container service, users must first install the container CLI via Homebrew and initialize Apple’s container framework:

brew install --cask 
container container system start

Once the framework is initialized, users can launch Kali Linux with the following command, which pulls the container image directly from Docker Hub and runs it within macOS’s virtualization environment:

container run --rm -it kalilinux/kali-rolling

Users also have the option to mount a local directory into the Kali Linux container:

container run --remove --interactive --tty --volume $(pwd):/mnt --workdir /mnt docker.io/kalilinux/kali-rolling:latest

At present, containerized Kali Linux is supported exclusively on Macs equipped with Apple Silicon (M-series chips). Systems running on Intel-based Macs are not compatible with this feature.

Additionally, during early testing, the Kali Linux team noted certain networking issues within the containerized environment, such as difficulties in acquiring an IP address. Moreover, due to the hardware isolation inherent in containerization, some Kali Linux use cases that require direct hardware passthrough may not function as intended.

Related Posts:

• macOS Sequoia Update Disrupts Major Cybersecurity Tools
• Kali Linux Users Urged to Manually Install New Repository Signing Key After Key Loss

Support Our Threat Intelligence

If you find our CVE report and cybersecurity news helpful, consider supporting our work.

Buy Me a Coffee PayPal

Crypto

USDT (TRC20):

TN8BdV8cp4T1Cd28gK9qTAnZknzzuwyUtm Copy

USDT (ERC20):

0x3725e1a7d3bc5765499fa6aaafe307fabcd75bce Copy

Do Son

Do Son (aka Ddos) is a seasoned news reporter, bringing over a decade of expertise to the forefront of cyber security and technology reporting. My work provides timely and insightful analysis of emerging trends and critical developments in these rapidly evolving sectors.