Autostart both sandbox VMs under Tart on softnet - #192
Draft
samestep wants to merge 1 commit into
Draft
Conversation
Two VMs on the same Mac can't reach each other directly — Lima (vzNAT) and Tart (default NAT) each put their guest behind Apple's per-VM NAT, which enables vmnet bridge isolation and blocks cross-VM traffic, and their non-isolating modes (socket_vmnet, softnet) build separate bridges, so a Lima guest and a Tart guest can't share one. So Tailscale relays their traffic through a DERP server instead of taking the local path. Run both VMs under Tart on softnet with `--net-softnet-allow=0.0.0.0/0`, which drops isolation and lands them on one shared vmnet (192.168.2.0/24); verified two softnet VMs reach each other directly at ~0.5 ms, so Tailscale connects them directly. This moves the aarch64-linux VM off Lima onto Tart. - Add `pkgs.softnet` and LaunchAgents that `tart run --net-softnet --net-softnet-allow=0.0.0.0/0` each VM. - README documents the migration, the one-time setuid-root softnet install (Home Manager can't set setuid), and the caveat that the agents start VMs at login (Virtualization.framework needs a GUI session), not at boot. The autostart is unproven — Tart + launchd is new here, and some startup/shutdown pain is macOS-intrinsic (the same session/DHCP-lease issues Lima had). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_013Wku9K54eBg5KJnXDfpvkQ
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Complementary to #191.