Orchestrator for running Tart Virtual Machines on a cluster of Apple Silicon devices
Go to file
Kyle Fuhrmann 25d8d9d1c0 Add --no-audio support to VM spec
tart run supports --no-audio to disable host audio pass-through, but
there was no way to request it through a VM's spec - Headless, Nested,
and Suspendable all have a flag/field but audio didn't. Useful on
headless hosts with no audio hardware, where audio pass-through can
make guest CoreAudio depend on host audio services that don't exist.
2026-08-07 10:06:32 -07:00
.github Migrate CI from Cirrus CI to GitHub Actions (#447) 2026-07-16 17:57:06 -04:00
api Add --no-audio support to VM spec 2026-08-07 10:06:32 -07:00
cmd/orchard Orchard Controller: implement an SSH server that acts as a jump host (#179) 2024-06-11 19:32:45 +04:00
docs Move documentation to Tart's website (#199) 2024-09-03 21:08:11 +04:00
internal Add --no-audio support to VM spec 2026-08-07 10:06:32 -07:00
pkg Add --no-audio support to VM spec 2026-08-07 10:06:32 -07:00
rpc API endpoint and associated RPC changes to resolve VMs IP's (#188) 2024-07-03 22:56:43 +04:00
test/load test(load): avoid unnecessary new Uint8Array(...) (#414) 2026-02-23 18:57:12 +01:00
.gitignore Better state syncing and other improvements (#24) 2023-03-01 11:42:16 -05:00
.golangci.yml Migrate CI from Cirrus CI to GitHub Actions (#447) 2026-07-16 17:57:06 -04:00
.goreleaser.yml Migrate CI from Cirrus CI to GitHub Actions (#447) 2026-07-16 17:57:06 -04:00
DEVELOPMENT.md Move documentation to Tart's website (#199) 2024-09-03 21:08:11 +04:00
Dockerfile Migrate CI from Cirrus CI to GitHub Actions (#447) 2026-07-16 17:57:06 -04:00
LICENSE Relicense under FSL-1.1-ALv2 (#446) 2026-06-05 15:37:34 -07:00
README.md Migrate CI from Cirrus CI to GitHub Actions (#447) 2026-07-16 17:57:06 -04:00
buf.gen.yaml Port forwarding support (#30) 2023-03-14 11:31:13 -04:00
buf.work.yaml Port forwarding support (#30) 2023-03-14 11:31:13 -04:00
go.mod Bump google.golang.org/grpc in the all-updates group (#423) 2026-03-23 22:01:01 +01:00
go.sum Bump google.golang.org/grpc in the all-updates group (#423) 2026-03-23 22:01:01 +01:00

README.md

Orchard

[!IMPORTANT]

macOS 15 (Sequoia) or later

The newly introduced "Local Network" permission in macOS Sequoia requires accepting a GUI pop-up on each host machine that runs the Orchard Worker.

To work around this, there are two options. The first one is to invoke the orchard worker run as root with an additional --user command-line argument, which takes a name of your regular, non-privileged user on the host machine.

This will cause the Orchard Worker to start a small orchard localnetworkhelper process in the background and then drop the privileges to the specified user.

The helper process is privileged and needed to establish network connections on behalf of the Orchard Worker without triggering a GUI pop-up.

This approach is more secure than simply running orchard worker run as root, because only a small part of Orchard Worker runs privileged and the only functionality that this part has is establishing new connections.

The second workaround is to set local the network privacy preferences so that all IPv4 private address space that could potentially be used for VMs is excluded:

sudo defaults write com.apple.network.local-network AllowedEthernetLocalNetworkAddresses -array "10.0.0.0/8" "172.16.0.0/12" "192.168.0.0/16"
sudo defaults write com.apple.network.local-network AllowedWiFiLocalNetworkAddresses -array "10.0.0.0/8" "172.16.0.0/12" "192.168.0.0/16"

...and then reboot.

Orchard is an orchestration system for Tart. Create a cluster of bare-metal Apple Silicon machines and manage dozens of VMs with ease!

Usage

The fastest way to get started with Orchard is to use a local development mode:

brew install openai/tools/orchard
orchard dev

This will start Orchard Controller and a single Orchard Worker on your local machine.

You can interact with the newly created cluster using the orchard CLI or programmatically, through the built-in REST API server.

Please check out the official documentation for more information and/or feel free to use issues for the remaining questions.