Yibo Zhuang
ae29e3c979
Read the cloned VM state before applying resource overrides or randomizing its MAC address and serial. Suspended clones must retain the configuration used to save their state. Cover suspended and stopped clones through the command runner, including assigned resource precedence, optional image FQN lookup, and metadata command and JSON errors.
Orchard
Important
macOS 15 (Sequoia) or later
The newly introduced "Local Network" permission in macOS Sequoia requires accepting a GUI pop-up on each host machine that runs the Orchard Worker.
To work around this, there are two options. The first one is to invoke the
orchard worker runasrootwith an additional--usercommand-line argument, which takes a name of your regular, non-privileged user on the host machine.This will cause the Orchard Worker to start a small
orchard localnetworkhelperprocess in the background and then drop the privileges to the specified user.The helper process is privileged and needed to establish network connections on behalf of the Orchard Worker without triggering a GUI pop-up.
This approach is more secure than simply running
orchard worker runasroot, because only a small part of Orchard Worker runs privileged and the only functionality that this part has is establishing new connections.The second workaround is to set local the network privacy preferences so that all IPv4 private address space that could potentially be used for VMs is excluded:
sudo defaults write com.apple.network.local-network AllowedEthernetLocalNetworkAddresses -array "10.0.0.0/8" "172.16.0.0/12" "192.168.0.0/16" sudo defaults write com.apple.network.local-network AllowedWiFiLocalNetworkAddresses -array "10.0.0.0/8" "172.16.0.0/12" "192.168.0.0/16"...and then reboot.
Orchard is an orchestration system for Tart. Create a cluster of bare-metal Apple Silicon machines and manage dozens of VMs with ease!
Usage
The fastest way to get started with Orchard is to use a local development mode:
brew install openai/tools/orchard
orchard dev
This will start Orchard Controller and a single Orchard Worker on your local machine.
You can interact with the newly created cluster using the orchard CLI or programmatically, through the built-in REST API server.
Please check out the official documentation for more information and/or feel free to use issues for the remaining questions.