apple-container-internals
description (verbatim frontmatter)
Architecture-level knowledge of Apple's `container` runtime source (vendors/apple/container) — how it actually runs a Linux container as a per-container lightweight VM: the apiserver/XPC-helper process model, the DNSServer + SocketForwarder networking path, ContainerBuild, ContainerOS, the config.toml schema, and the CLI command surface. Use when the user asks how `container` works internally, which process does what, how container networking/ DNS/port-forwarding is implemented, how to read or extend a specific subsystem under vendors/apple/container/Sources, what config.toml keys exist, or wants an exact CLI command from the vendored command-reference. Trigger on "how does apple container work", "container-apiserver", "container networking internals", "DNSServer", "SocketForwarder", "vmnet", "container XPC", "config.toml", "container-network-vmnet", "container command reference". Do NOT use for container lifecycle GATES, sandboxing policy, or eBPF/security work (apple-linux-containers owns those), nor for authoring Swift apps (swift-app-engineering).
summary
Architecture-level knowledge of Apple's `container` runtime source (vendors/apple/container) — how it actually runs a Linux container as a per-container lightweight VM: the apiserver/XPC-helper process model, the DNSServer + SocketForwarder networking path, ContainerBuild, ContainerOS, the config...
source
plugins/cwc-ios-engineering/skills/apple-container-internals/SKILL.md
provenance
created 2026-07-10 18:13:13 · JSON