templates: add linuxbrew #3454

AkihiroSuda · 2025-04-21T17:32:31Z

This template does not use macOS as the guest OS, because it seems hard to automate provisioning macOS instances (accept EULA, skip enabling iCloud, set up SSH...).

To run Homebrew on macOS with a sandbox, Alcoholless can be used instead. The alclessctl CLI of Alcoholless is designed to be similar to limactl: https://github.com/AkihiroSuda/alcless

alclessctl create default
cd ~/SOME_DIRECTORY
alcless brew install xz
alcless xz SOME_FILE

Eventually, Alcoholless may be consolidated into Lima.

AkihiroSuda · 2025-04-21T17:39:03Z

templates/linuxbrew.yaml

+#
+# To run Homebrew on macOS with a sandbox user account, Alcoholless can be used instead.
+# The `alclessctl` CLI of Alcoholless is designed to be similar to `limactl`:
+# https://github.com/AkihiroSuda/alcless


(Happy to move https://github.com/AkihiroSuda/alcless to https://github.com/lima-vm if there is no objection)

This is probably not the best place to discuss this. I don't have strong objections, but it does not really feel like it is related to "Linux Machines"; it is more like a chroot jail.

I also really don't like the name. I find the whole beer/brew/tap/cask/bottle terminology quite weird, and unless you want to make this part of homebrew, I don't know why you would have picked a name from the same origin. Also alclessctl has just too many syllables. 😄

This is probably not the best place to discuss this. I don't have strong objections, but it does not really feel like it is related to "Linux Machines"

There has been a discussion to extend the project scope to support non-Linux Machines:

Support for FreeBSD guests ? #1508

My initial intent was to extend Lima to directly support macOS VMs so as to isolate brew install <RANDOM_UNREVIEWED_PACKAGE> from the host, but I ended up creating a "poor man's container with Lima's CLI" using su + sudo + rsync, because macOS doesn't have an equivalent of cloud-init 😞. I strongly guess that Apple internally has it, though.

it is more like a chroot jail.

It is just su + sudo + rsync

I also really don't like the name.

I don't like the name either 😅 . Suggestions are welcome for an alternative name..

I find the whole beer/brew/tap/cask/bottle terminology quite weird, and unless you want to make this part of homebrew, I don't know why you would have picked a name from the same origin.

I still want to make it part of the upstream Homebrew, but I don't feel it is negotiable with Homebrew maintainers in the current state, as Alcoholless depends on the "Untar anywhere (unsupported)" mode (Tier 3).

I still wish that this mode could be promoted to Tier 1, or at least Tier 2, if I manage to spread Alcoholless to Homebrew users.

Also alclessctl has just too many syllables. 😄

Yep. Totally unpronounceable 😓

There has been a discussion to extend the project scope to support non-Linux Machines:

Support for FreeBSD guests ? #1508

That is still about virtualization though. But I guess we can still find some over-arching theme that would make it fit, like "running isolated workloads" or something... As I said, I don't have strong objections, just feels a bit like scope creep.

My initial intent was to extend Lima to directly support macOS VMs so as to isolate brew install <RANDOM_UNREVIEWED_PACKAGE> from the host, but I ended up creating a "poor man's container with Lima's CLI" using su + sudo + rsync, because macOS doesn't have an equivalent of cloud-init 😞. I strongly guess that Apple internally has it, though.

Maybe, but I doubt that they would ever make it publicly available.

I don't like the name either 😅 . Suggestions are welcome for an alternative name..

Why not call it jail. It is short, pronounceable, and unclaimed, afaict. Also has nice symmetry with lima and limactl: jail and jailctl.

"jail" means FreeBSD-style jails by default, so some prefix would have to be prepended to "jail"
e.g., "brewjail", "userjail", etc.

I don't really see the connection between this template and alcless, it reads more like an advert?

Having a template for Linuxbrew sounds possible, but then again it's just Ubuntu and brew.sh

it reads more like an advert?

I agree, but I thought @AkihiroSuda gets some leeway here, as the creator of the Lima project.

We continued to brainstorm on Slack. I kind of like confine, as in "you are confined to this directory and cannot escape".

Synonyms: enclose, restrict. But I like confine best.

Another candidate: silo

Removed the advert from the yaml

isola

To me it sounds like an equivalent of mtools (still actively maintained in 2025 👀) for ISO9660 images 💿

confine, enclose, restrict

Ungoogleable.

silo

Taken by https://github.com/Homebrew/homebrew-cask/blob/HEAD/Casks/s/silo.rb

Thanks for the suggestions anyway.

Let me open a new issue for continuing the discussion

alclessctl is unpronounceable AkihiroSuda/alcless#10

templates/linuxbrew.yaml

jandubois

Thanks, LGTM

This template does not use macOS as the guest OS, because it seems hard to automate provisioning macOS instances (accept EULA, skip enabling iCloud, set up SSH...). To run Homebrew on macOS with a sandbox, Alcoholless can be used instead. The `alclessctl` CLI of Alcoholless is desigined to be similar to `limactl`: https://github.com/AkihiroSuda/alcless ``` alclessctl create default cd ~/SOME_DIRECTORY alcless brew install xz alcless xz SOME_FILE ``` Signed-off-by: Akihiro Suda <[email protected]>

jandubois

Thanks, LGTM

This MR contains the following updates: | Package | Update | Change | |---|---|---| | [lima-vm/lima](https://github.com/lima-vm/lima) | minor | `v1.0.7` -> `v1.1.1` | MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot). **Proposed changes to behavior should be submitted there as MRs.** --- ### Release Notes <details> <summary>lima-vm/lima (lima-vm/lima)</summary> ### [`v1.1.1`](https://github.com/lima-vm/lima/releases/tag/v1.1.1) [Compare Source](lima-vm/lima@v1.1.0...v1.1.1) #### Changes - Fixed the guestagent path issues with Homebrew ([#3566](lima-vm/lima#3566), thanks to [@jandubois](https://github.com/jandubois)) - Documentation for disk management https://lima-vm.io/docs/config/disk/ ([#3539](lima-vm/lima#3539), thanks to [@Sonichigo](https://github.com/Sonichigo)) #### Usage ```console [macOS]$ limactl create [macOS]$ limactl start ... INFO[0029] READY. Run `lima` to open the shell. [macOS]$ lima uname Linux ``` *** The binaries were built automatically on GitHub Actions. The build log is available for 90 days: https://github.com/lima-vm/lima/actions/runs/15178234655 The sha256sum of the SHA256SUMS file itself is `0d2d3fb073c8e26df163937dd605e9f2b9f227814a697411cc2b8879347bdd7f` . *** Release manager: [@AkihiroSuda](https://github.com/AkihiroSuda) ### [`v1.1.0`](https://github.com/lima-vm/lima/releases/tag/v1.1.0) [Compare Source](lima-vm/lima@v1.0.7...v1.1.0) > \[!IMPORTANT] > Package maintainers should refer to "Hint for package maintainers" below Highlights: - Simplification of YAMLs - New port forwarder implementation by default - DragonflyBSD hosts - S390X and PPC64LE guests - Smaller binary packages #### Changes - Build system: - Split `lima-additional-guestagents-*.tar.gz` from `lima-*.tar.gz` ([#3503](lima-vm/lima#3503)) - Set `CONFIG_GUESTAGENT_COMPRESS=y` by default ([#3529](lima-vm/lima#3529)) - YAML: - Support inheritance ([#3072](lima-vm/lima#3072), thanks to [@jandubois](https://github.com/jandubois)) - Deprecate provision mode `ansible` ([#3451](lima-vm/lima#3451), thanks to [@afbjorklund](https://github.com/afbjorklund)) - Add new provision mode `data` ([#3302](lima-vm/lima#3302), thanks to [@jandubois](https://github.com/jandubois)) - QEMU: - Support DragonflyBSD hosts ([#3356](lima-vm/lima#3356), thanks to [@tuxillo](https://github.com/tuxillo)) - Support S390X guests ([#3319](lima-vm/lima#3319)) - Support PPC64LE guests ([#3488](lima-vm/lima#3488)) - TCG: change the default CPU from `qemu64` (x86-64 v1) to `max` ([#3487](lima-vm/lima#3487)) - Bump up the minimum QEMU version to v8.2.1 on ARM Mac. On Linux/x86\_64, QEMU v6.2.0 is still supported. ([#3491](lima-vm/lima#3491)) - WSL2: - Lots of improvements (several MRs, thanks to [@arixmkii](https://github.com/arixmkii)) - Port forwarding: - Enable faster gRPC implementation by default ([#3046](lima-vm/lima#3046)) - `limactl` CLI: - Add `--yes` flag as an alias of `--tty=false` ([#3342](lima-vm/lima#3342), thanks to [@suryaaprakassh](https://github.com/suryaaprakassh)) - Support resizing disk in `limactl edit` ([#3437](lima-vm/lima#3437), [#3533](lima-vm/lima#3533), thanks to [@songponssw](https://github.com/songponssw)) - Add `limactl disk import` command ([#3439](lima-vm/lima#3439), thanks to [@songponssw](https://github.com/songponssw)) - Rootless Containers: - Allow UID >= 524288 ([#3435](lima-vm/lima#3435)) - nerdctl: - Update from v2.0.4 to [v2.1.2](https://github.com/containerd/nerdctl/releases/tag/v2.1.2). ([#3483](lima-vm/lima#3483), [#3534](lima-vm/lima#3534), [#3560](lima-vm/lima#3560)) See also the release notes of [v2.0.5](https://github.com/containerd/nerdctl/releases/tag/v2.0.5), [v2.1.0](https://github.com/containerd/nerdctl/releases/tag/v2.1.0), [v2.1.1](https://github.com/containerd/nerdctl/releases/tag/v2.1.1). - nerdctl v2.1.1 included in Lima v1.1.0-rc.0 had a vulnerability of containerd CVE-2025-47290 (GHSA-cm76-qm8v-3j95). Other versions of Lima are not affected. - Templates: - `ubuntu-25.04`: New template ([#3445](lima-vm/lima#3445)). The `default` template still refers to Ubuntu 24.10, as `ubuntu-25.04` needs the very recent release of macOS on Intel Mac by default (see the note below). - `fedora-42`: New template ([#3434](lima-vm/lima#3434)) - `linuxbrew`: New template ([#3454](lima-vm/lima#3454)) - `almalinux-kitten-10`: New template ([#3084](lima-vm/lima#3084), thanks to [@afbjorklund](https://github.com/afbjorklund)) - `oraclelinux-8`: Fix virtiofs support ([#3441](lima-vm/lima#3441)) > \[!NOTE] > On Intel Mac with `--vm-type=vz`, macOS 15.5 or later is needed to boot `ubuntu-25.04` and `fedora-42` Full changes: https://github.com/lima-vm/lima/milestone/26?closed=1 Thanks to [@KGB33](https://github.com/KGB33) [@Nino-K](https://github.com/Nino-K) [@afbjorklund](https://github.com/afbjorklund) [@alexandear](https://github.com/alexandear) [@apachex692](https://github.com/apachex692) [@arixmkii](https://github.com/arixmkii) [@cakemanny](https://github.com/cakemanny) [@jandubois](https://github.com/jandubois) [@jonas-peter](https://github.com/jonas-peter) [@kairveeehh](https://github.com/kairveeehh) [@liangyuanpeng](https://github.com/liangyuanpeng) [@nirs](https://github.com/nirs) [@shenki](https://github.com/shenki) [@songponssw](https://github.com/songponssw) [@unsuman](https://github.com/unsuman) [@ycdzj](https://github.com/ycdzj) #### Hint for package maintainers Starting with v1.1, the official binary packages of Lima are split to two files for the each of the host OS and the architectures to save the disk space: 1. `lima-<VERSION>-Darwin-arm64.tar.gz`: (Built with `make native`) - The core components (`bin/lima`, `bin/limactl`, `share/lima/templates`, ...) - The guest agent for the native architecture (`share/lima/lima-guestagent.Linux-aarch64.gz`) 2. `lima-additional-guestagents-<VERSION>-Darwin-arm64.tar.gz`: (Built with `make additional-guestagents`) - The guest agents for emulating non-native architectures (`share/lima/lima-guestagent.Linux-{armv7l,ppc64le,riscv64,s390x,x86_64}.gz)`) For compatibility reason, `make` still builds the guest agents for all the architectures by default. Package maintainers are suggested to split their `lima` package to `lima` (`make native`) and `lima-additional-guestagents` (`make additional-guestagents`). #### Usage ```console [macOS]$ limactl create [macOS]$ limactl start ... INFO[0029] READY. Run `lima` to open the shell. [macOS]$ lima uname Linux ``` *** The binaries were built automatically on GitHub Actions. The build log is available for 90 days: https://github.com/lima-vm/lima/actions/runs/15154830653 The sha256sum of the SHA256SUMS file itself is `4391505a7f833c8245497b29fec65743abb1561a275037f6d268026284883c8a` . *** Release manager: [@AkihiroSuda](https://github.com/AkihiroSuda) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this MR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this MR, check this box --- This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

AkihiroSuda added the area/homebrew Homebrew formula label Apr 21, 2025

AkihiroSuda added this to the v1.1.0 milestone Apr 21, 2025

AkihiroSuda force-pushed the linuxbrew branch 2 times, most recently from 2516450 to 0474835 Compare April 21, 2025 17:35

AkihiroSuda commented Apr 21, 2025

View reviewed changes

AkihiroSuda force-pushed the linuxbrew branch from 0474835 to e3542a5 Compare April 22, 2025 06:12

jandubois reviewed Apr 22, 2025

View reviewed changes

templates/linuxbrew.yaml Outdated Show resolved Hide resolved

jandubois reviewed Apr 22, 2025

View reviewed changes

templates/linuxbrew.yaml Outdated Show resolved Hide resolved

AkihiroSuda marked this pull request as draft April 22, 2025 07:56

AkihiroSuda force-pushed the linuxbrew branch 2 times, most recently from dbd4ba0 to c4ed6d9 Compare April 22, 2025 08:03

AkihiroSuda marked this pull request as ready for review April 22, 2025 08:06

jandubois previously approved these changes Apr 22, 2025

View reviewed changes

AkihiroSuda dismissed jandubois’s stale review via ada31bf April 23, 2025 02:59

AkihiroSuda force-pushed the linuxbrew branch from c4ed6d9 to ada31bf Compare April 23, 2025 02:59

jandubois approved these changes Apr 23, 2025

View reviewed changes

AkihiroSuda mentioned this pull request Apr 23, 2025

alclessctl is unpronounceable AkihiroSuda/alcless#10

Open

AkihiroSuda merged commit 473fc70 into lima-vm:master Apr 23, 2025
31 of 32 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

templates: add linuxbrew #3454

templates: add linuxbrew #3454

Uh oh!

AkihiroSuda commented Apr 21, 2025 •

edited

Loading

Uh oh!

AkihiroSuda Apr 21, 2025

Uh oh!

jandubois Apr 22, 2025

Uh oh!

AkihiroSuda Apr 22, 2025

Uh oh!

jandubois Apr 22, 2025

Uh oh!

AkihiroSuda Apr 22, 2025

Uh oh!

afbjorklund Apr 22, 2025 •

edited

Loading

Uh oh!

jandubois Apr 22, 2025

Uh oh!

jandubois Apr 22, 2025 •

edited

Loading

Uh oh!

AkihiroSuda Apr 23, 2025

Uh oh!

AkihiroSuda Apr 23, 2025

Uh oh!

Uh oh!

Uh oh!

jandubois left a comment

Uh oh!

jandubois left a comment

Uh oh!

Uh oh!

Uh oh!

templates: add linuxbrew #3454

templates: add linuxbrew #3454

Uh oh!

Conversation

AkihiroSuda commented Apr 21, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

afbjorklund Apr 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

jandubois Apr 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

jandubois left a comment

Choose a reason for hiding this comment

Uh oh!

jandubois left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

AkihiroSuda commented Apr 21, 2025 •

edited

Loading

afbjorklund Apr 22, 2025 •

edited

Loading

jandubois Apr 22, 2025 •

edited

Loading