Can I Run Kali Linux on macOS Using Apple's Containerization Feature?

Key takeaways

• Apple's Containerization framework and the container tool run Linux containers as lightweight VMs on Apple silicon Macs.
• You get a Kali command-line environment from the official image, not a full desktop, and some network and hardware tools will not work.
• For Wi-Fi tools, a full GUI or USB devices, use a proper virtual machine instead.
• Use it only for authorised practice.

What Apple's containerization is

At WWDC 2025 Apple introduced a Swift framework called Containerization and an open-source command-line tool called container. Both are published by Apple on GitHub (apple/container and apple/containerization). They let a Mac run Linux containers where each container gets its own lightweight virtual machine, rather than many containers sharing one big VM as in some other setups. It is aimed at Apple silicon Macs. Requirements and supported macOS versions are in the project's README, and they change with releases, so read it before you start.

Can you run Kali this way?

Yes, for command-line work. Kali publishes official container images, and the container tool can pull and run OCI images. You get a Kali shell where you can install and run many command-line tools. You do not get a full desktop, and some hardware-dependent tools will not work.

Setup

Check the README for the current steps. The usual outline:

1. Use an Apple silicon Mac on a supported macOS version.
2. Download the signed installer package from the project's GitHub releases page and install it.
3. Start the container service:

container system start

1. Pull and run the official Kali image:

container run -it --rm docker.io/kalilinux/kali-rolling /bin/bash

1. Inside the container, update the package list and install what you need:

apt update
apt install -y nmap

Kali images are minimal by design. The Kali documentation explains the container images and metapackages. Commands may differ in newer versions, so use container --help to confirm.

What works

• Command-line tools: Nmap, many scripting languages, text-based utilities.
• Fast start and stop, and easy deletion after each practice session.
• Clean environments that do not touch your Mac's files, unless you share folders deliberately.

What does not, or needs care

Alternatives

• A full virtual machine such as one built with Apple's virtualisation features or a third-party hypervisor, using the Kali ARM image for Apple silicon. This is the better choice for the GUI and USB hardware.
• Docker Desktop and similar tools also run Kali containers, with different networking behaviour. See the Docker documentation.
• A dedicated machine or cloud lab for serious testing.

For the concept of containers, read how Docker works and what Kubernetes and containers are.

Safety and legal notes

Use Kali only on systems you own or are authorised to test. Scanning networks or devices without permission can be an offence under India's IT Act, 2000. Keep your lab traffic on your own network and targets such as intentionally vulnerable VMs.

Troubleshooting

• Service will not start: check macOS and chip requirements in the README, and rerun container system start.
• Image will not pull: check your internet connection and the image name.
• Tool fails with a permissions or network error: it may need hardware or raw network access the container lacks. Try a VM.

Next steps

For a fuller learning route, see the Kali Linux Certified Professional (KLCP) course and the CEH v13 AI course. Read the related post on Apple's native containerization and Kali deployment.