Oxid VM
Linux, Windows and containers. One Mac app.
Run Linux, macOS and Windows 11 guests and Android apps on Apple Silicon, with the Docker CLI bundled, single-node Kubernetes a switch away, and disposable sandboxes your coding agent can run code in instead of on your Mac.
Or get Oxid VM and 13 more apps for $99 in the Value Pack
8
guest OS templates
2-in-1
VMs and containers
arm64
Apple Silicon native
Feature 01
Linux, macOS and Windows, side by side
Eight templates. Ubuntu Server and Debian install themselves from a checksum-verified cloud image. Fedora and Alpine download their installer for you. Arch and NixOS boot from an installer ISO you attach. macOS installs from Apple's restore image on Apple Silicon hosts, and Windows 11 on ARM uses an Arm64 ISO you supply. Linux and macOS run on Apple Virtualization, the framework macOS already ships. Windows runs on a bundled, signed QEMU helper, because Apple's framework cannot run it.
Feature 02
Android apps and games
Android 13 in its own section, set up for you. Install apps from APK files or F-Droid, play 3D games on your Mac's GPU with sound, or let an AI agent install, tap, type and read the screen over MCP. A beta, in Pro, with no Play Store.
Feature 03
Containers without a second product
The Docker CLI, Compose and Buildx ship with the app and talk to Docker Engine in a small Linux VM the app runs for you. Oxid VM registers an oxid Docker context, and one click makes it your default. The first start downloads about 3 GB and needs an internet connection.
Feature 04
Kubernetes when you want it
Enable a single-node k3s cluster inside the same VM that runs Docker, and kubectl is configured for you: the oxid context is merged into your existing kubeconfig, after a backup, rather than replacing it.
Feature 05
A sandbox your agent can throw away
Connect Claude Code, Codex, Cursor, VS Code or any other MCP client, and your agent can clone one of your stopped VMs, run commands inside the copy, and destroy it. It cannot start, stop, change or delete your own VMs, or touch Docker or Kubernetes. The copy holds everything that VM holds, and sandboxes currently have network access, so clone a VM you set up for the purpose.
Feature 06
Guests that feel local
Shared folders for Linux and macOS guests, mounted automatically in Linux. Clipboard sync and drag-and-drop from the Mac into Linux guests running the Oxid guest agent. Snapshots, port forwarding, and Rosetta for x86-64 Linux binaries.
Gallery
Take a look.
Watch
See it in action.
How it compares
Where it fits, and where it doesn't.
| Oxid VM | Docker Desktop | Parallels | |
|---|---|---|---|
| Price | $79 once | Free for personal use and small businesses; paid subscription for larger companies | Annual subscription; Standard Edition also sold as a one-time licence |
| Linux and macOS virtual machines | Yes, on Apple Virtualization | No (containers only) | Yes |
| Windows 11 on ARM | Yes, with an Arm64 ISO you supply; runs as unsupported hardware (no TPM) | No (containers only) | Yes, authorized by Microsoft |
| 3D acceleration in Windows | DirectX 11 on the Mac's GPU (beta, in Pro) | — | Up to DirectX 11 |
| Android apps | Android apps and 3D games, with sound (beta, in Pro); no Play Store | No (containers only) | Android Studio's emulator inside a Windows VM (nested virtualization) |
| Docker | Docker Engine in a Linux VM the app manages; CLI, Compose and Buildx bundled | Yes | Pro Edition supports Docker workflows |
| Kubernetes | Single-node k3s with kubectl | Yes (kubeadm or kind) | Minikube driver (Pro Edition) |
Competitor details checked October 2, 2026. Full comparison, with sources
Pinned, signed tools
The bundled docker, Compose, Buildx and kubectl binaries are checksum-pinned when the app is built, and signed with it.
Apple Virtualization first
Linux and macOS guests use the framework macOS already ships. Windows gets a bundled helper because Apple's framework cannot run it.
Real logs
A CLI that reads the log file directly, so it still works when the app will not launch.
System Requirements
macOS 14 Sonoma or later. Apple Silicon (M1 or newer). 8 GB RAM minimum; 16 GB recommended for Windows guests or Kubernetes, since a Windows VM gets 8 GB and the Docker VM 4 GB by default. An internet connection the first time you start Docker. Windows guests need a Windows 11 Arm64 ISO you supply and the virtio-win driver disc; a Windows VM's disk is 64 GB and fills as Windows uses it.
Frequently asked
Got questions?
What stays free after the trial?
The 7-day trial unlocks everything. After it, the Free plan keeps Linux VMs, up to 3 running at once, plus Docker and Kubernetes. Creating macOS or Windows VMs, running Android, and DirectX 11 need Pro, $79 once. macOS and Windows VMs you made during the trial still start, without DirectX. Android VMs and their apps are kept, and start again once Pro is active.
Does it run on Intel Macs?
No. Oxid VM targets Apple Silicon and the Apple Virtualization framework.
How does an AI agent use it?
Oxid VM speaks the Model Context Protocol. The app gives you ready-made setup for Claude Code, Claude Desktop, Codex, Cursor and VS Code, and the command and arguments for any other MCP client. After that you can ask your agent to run something “somewhere disposable” and it will, in a clone of one of your stopped VMs rather than on your Mac. The Agents panel lists every running sandbox and lets you destroy any of them.
What can the agent actually reach?
Sandboxes first: the agent can create one from a stopped VM you choose, run commands in it, list sandboxes and the VMs it can clone, and destroy them. It cannot start, stop, change or delete your own VMs, touch Docker or Kubernetes, or read your licence, and no host folder is shared into a sandbox. A sandbox is a full copy of the VM it was cloned from, so the agent can read whatever is inside that VM, and sandboxes currently have network access. Separately, you can allow it to use VMs by name (`oxidvm config set mcp_vms <name>`): it can then run commands in them, copy files through one folder on your Mac, and look at and click their screen, and on the Android device it can install and open apps, tap, type and read Android's log. Only you can allow a VM; the agent cannot.
Can I run macOS guests?
Yes, on Apple Silicon hosts, within Apple's licensing terms for macOS virtualization.
Can I run Windows?
Yes: Windows 11 on ARM, on Apple Silicon. You supply your own Arm64 ISO from Microsoft; we are not permitted to distribute one. Setup runs in a window and you click through it yourself. Afterwards you run one command the app gives you, inside Windows, to install the network and display drivers. Those drivers come from the open-source virtio-win disc, which the app does not download for you: put virtio-win.iso in ~/.oxidvm/iso-cache before you create the VM, or Windows will have no network and an 800×600 screen.
Can I run Android apps?
Yes, as a beta in Oxid VM Pro; the 7-day trial includes it. The Android section sets up Android 13 for you: about 1.3 GB of downloads, each from its own publisher, and around 6 minutes on a typical connection. Android then uses about 4 GB of memory while it runs. Install apps from APK files or from F-Droid, and use them in a window with sound. 3D games run on your Mac's GPU, including games that use Vulkan; in our tests SuperTuxKart races at over 60 frames per second on an M4. Many apps that use Google services work through microG, an open-source replacement, but the Google Play Store is not included. Apps that check for a certified phone (many banking apps and some online games) do not run, and neither do apps made only for old 32-bit phones. You can also let an AI agent install, open and test apps over MCP.
Is Windows activated and supported?
No. These VMs have no TPM, so Windows treats them as unsupported hardware: it installs and runs, but Microsoft does not guarantee updates for it, and feature updates to the next Windows release are refused. Bring your own licence key for activation.
Will Windows games or 3D apps work?
Some will, as a beta. Oxid VM 1.0 runs DirectX 11 in Windows 11 on ARM guests on your Mac's GPU. It is part of Oxid VM Pro, and the 7-day trial includes it. Turn on DirectX 11 in the VM's settings, and at the next start the app installs the open-source Triton display driver from UTM inside Windows, then restarts the VM once; that download needs an internet connection. It is a beta: the drivers are new and can be unstable, and the first minutes after each Oxid VM update are slower while shaders are rebuilt. Only DirectX 11 is supported, not DirectX 12 or Vulkan, and Windows Fast Startup is turned off in that VM because it crashes the 3D device. Turn the switch off and the VM goes back to the 2D display. Windows guests still have no shared folders, shared clipboard or drag-and-drop; files move through an exchange disk that you pass between the Mac and Windows.
Do I still need Docker Desktop?
Not for the Docker CLI, Compose or Buildx. They ship with the app and talk to Docker Engine running in a Linux VM that Oxid VM manages. The first start downloads a Debian image (about 3 GB) and installs Docker Engine into it, so it needs an internet connection. Anything that depends on Docker Desktop itself, rather than on the Docker CLI and Engine, is not replaced.
Does Oxid VM send anything to you?
Two things. Licence activation talks to our licence server. And if the built-in Docker VM fails to boot, the app sends a short failure report: app and macOS version, a device ID, which boot step failed, and free disk space. It is on by default and you can turn it off in Settings, Diagnostics.
Best value
Want more than Oxid VM?
The Oxid Value Pack includes Oxid VM and every other app we make — 14 in total, worth $516 bought separately. One licence, paid once.