0.4.12

Highlights

• Docker Engine API shim — on macOS, fluxctl serve listens on {run_dir}/docker.sock. Point Docker CLI with DOCKER_HOST=unix://…/docker.sock (brew install docker). Containers map to OCI sandboxes.
• Host hardening from the 0.4.12 train (TOTP MFA, VMM Guard exec allow-list / rule packs, fluxctl guard).
• Comparison matrix: docs/vs-desktop-hypervisors.md

macOS arm64 package is Developer ID signed and notarized.

v0.4.11

FluxVM 0.4.11

Clean macOS arm64 cut after 0.4.10 asset churn.

• Apple Silicon host GPU / MLX path
• QMP run_dir fix for short Unix socket paths
• Hardened Runtime entitlement so Homebrew hivex loads under notarized fluxctl
• Developer ID signing + notarization (Homebrew / GitHub distribution)

See CHANGELOG for details.

v0.4.10

macOS (Apple silicon) package. Install with Homebrew once the formula is updated for v0.4.10.

v0.4.8

macOS (Apple silicon) package. Install with Homebrew once the formula is updated for v0.4.8.

v0.4.7

macOS (Apple silicon) package. Install with Homebrew once the formula is updated for v0.4.7.

v0.4.6

macOS (Apple silicon) package. Install with Homebrew once the formula is updated for v0.4.6.

v0.4.5

macOS (Apple silicon) package.

brew install zyvorai/tap/fluxvm        # or: brew upgrade zyvorai/tap/fluxvm
brew services restart zyvorai/tap/fluxvm
fluxctl mcp install claude-code        # re-run after upgrading from 0.4.4 or earlier

What changed since 0.4.4 (full list in CHANGELOG.md):

• fluxctl mcp install, fluxctl service install and the fleet ssh ProxyCommand now write the version-free Homebrew opt path, so they keep working after brew upgrade (0.4.4 and earlier wrote the versioned Cellar path, which Homebrew removes: re-run fluxctl mcp install once).
• GET /readyz answers 200 on a Mac (it returned 503 because it required the Linux eBPF dataplane).
• fluxctl service install refuses to start a second daemon beside Homebrew's (or on a busy address); --force overrides.
• New global --listen HOST:PORT and --state-dir DIR (and FLUXVM_LISTEN, FLUXVM_STATE_DIR) so a second daemon needs no config file.
• Stopping a VM on a Mac no longer logs an nftables warning.
• Docs: an install guide with what was tested, the agent-sandbox demo scripts, measured memory per sandbox, and a refreshed site (zyvorai.github.io/zyvor-fluxvm).

Things to know

• The package does not include the USB passthrough helper (FluxVMUSBAccess.app): the hosted build SDK has no AccessoryAccess framework. USB passthrough needs a source build.
• Binaries are ad hoc signed, not Developer ID signed or notarized: no vmnet, bridged networking or USB passthrough (see docs/macos-signing.md).
• Self-service sign-up and Stripe in the fleet central are off by default and should stay off until sign-up email verification exists (docs/mac-cloud-operations.md).
• Tested before release on an Apple M4 (macOS 27.2): the workspace per crate (2151 tests, 0 failing), this package built, installed through Homebrew and exercised (service, /readyz, MCP handshake and a sandbox round trip, a second daemon, both demo scripts), and the published artifact booted a VM.
• sha256 of fluxvm-0.4.5-macos-arm64.tar.gz: a5ce0aa272cabce023ba82f57c2fd0ccd96bc88aee078244ecc9f66a6be25e2a

v0.4.4

macOS (Apple silicon) package.

brew install zyvorai/tap/fluxvm
fluxctl run                      # a throwaway Debian VM and a shell
brew services start fluxvm       # the daemon, API on 127.0.0.1:7788

What is in it. This is the first published release since 0.4.1: the 0.4.2 and 0.4.3 tags were never published (their
package builds failed on the hosted runner), so everything from both ships here. Highlights: branch prune, diff, export and
import; the fleet console and fluxctl fleet (power, screen, logs, snapshots and clones, volumes, SSH and port tunnels,
warm pools, metrics and Prometheus, API keys, prices and statements, signed webhooks); node-side volumes, tunnels and usage
stats; incident bundles; virtual networks; Go, Python and TypeScript clients and a Terraform provider; measured memory per
sandbox and an agent-sandbox demo. See CHANGELOG.md.

Things to know

• The package does not include the USB passthrough helper (FluxVMUSBAccess.app): the hosted build SDK has no
  AccessoryAccess framework, so it is built without it. USB passthrough needs a source build.
• Binaries are ad hoc signed, not Developer ID signed or notarized: no vmnet, bridged networking or USB passthrough
  (see docs/macos-signing.md).
• Self-service sign-up and Stripe in the fleet central are off by default and should stay off until sign-up email
  verification exists (docs/mac-cloud-operations.md).
• sha256 of fluxvm-0.4.4-macos-arm64.tar.gz: 022a0795f974b4e26aebfeb7cf869f8d9a0d9704e69e0b282900f79b9dd52ea2

v0.4.1

macOS (Apple silicon) package. Install with Homebrew once the formula is updated for v0.4.1.

FluxVM 0.4.0

FluxVM 0.4.0 for macOS (Apple silicon)

brew install zyvorai/tap/fluxvm
fluxctl run                    # a throwaway Debian VM and a shell
brew services start fluxvm     # the daemon, API on 127.0.0.1:7788

The package contains fluxctl, the signed Virtualization.framework runner (fluxvm-vz-runner), fluxvm-vz-switch, fluxvm-blockd (FluxDisk) and fluxvm-usernet. It needs macOS 14 or later on Apple silicon and hivex (Homebrew installs it). It is not notarised; installs through brew are not quarantined.

What is new, and what was verified on hardware versus not run, is in CHANGELOG.md and the hardware verification log in docs/macos.md.

SHA-256 of fluxvm-0.4.0-macos-arm64.tar.gz: 9c14d8270ec9963c448af72bdb908ab94011bbaa35b28fdcacbf708ec5dc86cb