OrbStack Release Notes

New Builds tab for Docker build history, steps, and logs

• SME support on M4 and newer
• UI: Added option to wrap log lines
• UI: Start and stop Supabase CLI stacks with one click
• UI: Fixed Compose projects splitting into multiple groups
• UI: Fixed misleading crash dialog when an external data disk fails
• CLI: Fixed orb push and orb pull for machines, including pushing as root
• CLI: Fixed terminal output being cleared
• CLI: Fixed crashes with non-POSIX login shells (e.g. xonsh)
• USB: Fixed pyserial tools failing to open forwarded serial devices
• USB: Support for Qualcomm modems
• Kubernetes: Fixed network policies not being enforced
• Kubernetes: Fixed high CPU usage
• Kubernetes: Restored CoreDNS Prometheus metrics
• Machines: Better error handling for x86 Alma Linux 10 emulation
• Fixed inbound UDP to host-networking containers (v2.2.2 regression)
• Fixed UDP packets over 1472 bytes being dropped on port forwards
• Fixed machine resource limits being reset if the app crashes
• Fixed ~/.ssh permissions being changed on start
• Fixed app restart loop when installed with Nix Home Manager

USB

• Support for USB webcams, microphones, modems, CAN, Xbox controllers, and audio
• Improved macOS 27 beta compatibility
• Slightly lower idle CPU, memory, and battery usage (especially with Kubernetes)
• Better protection against data corruption, with automatic recovery
• Fixed crashes, stuck devices, and some external drives
• Improved serial device support (CP210x, CDC-ACM, non-root access)
• Better device picker and categories

UI

• Better disk usage bars in storage settings
• Log search can now filter to only matching lines
• Cmd-Delete now asks for confirmation (Cmd-Opt-Delete to skip)
• Fixed delete shortcut conflicting with terminal input
• Fixed Compose projects splitting into multiple groups
• Fixed deleting Compose projects with missing directories
• Fixed terminal not restarting after exit
• Fixed crash when changing machine resource limits
• Fixed missing icons on some containers
• Fixed creating containers with custom commands

CLI

• Fixed command output disappearing after exit

Fixes

• Fixed microphone not working in machines/containers
• Fixed docker compose run containers taking over domains
• Fixed port forwards to specific IPs on ports under 1024
• Fixed file watchers missing some changes from macOS
• Fixed freezes and "file table overflow" errors on NFS/SMB shares
• Fixed incorrect disk usage on disks over 16 TB
• Fixed file ownership in gVisor (runsc) containers
• Fixed docker login keychain errors
• Fixed Docker containers failing to start inside machines
• Fixed PPP "operation not permitted" error
• Fixed cloud-init reboot and x86 machine timeouts
• Fixed nix-collect-garbage and "Bad fd number" errors in containers
• Fixed crashes when migrating from Docker Desktop
• Fixed Docker hanging when containers restart frequently
• Fixed containers sometimes failing to start after a restart
• Fixed "Start failed" and "timed out waiting for VM to start" errors
• Fixed updater errors and app failing to open after updates
• Fixed rare crashes and freezes

Kubernetes

• Fixed network policies blocking traffic in kind clusters

Updates

• Linux 7.0.14, Kubernetes 1.35, runc 1.5.1

Added kernel features

• fs-verity, Adiantum

Features

• USB device passthrough
  • Share serial devices and security keys without disconnecting them from macOS
  • Also supports USB Ethernet, Wi-Fi, SDRs, flash drives, Android phones, and more
• Sound support (playback and recording)
  • Use voice mode in Claude Code, Codex, and other tools
• Per-machine CPU, memory, and disk limits
• Fixed most known hangs and crashes
• Docker checkpoint/restore (CRIU) support
• Added buildx Kubernetes driver
• Added option to set the username during onboarding
• Added option for containerd image store (supports multiple platforms with same image tag)
• Improved gVisor (runsc) compatibility
• UI: Storage usage shown as a capacity bar
• UI: Kubernetes init containers are now shown
• UI: Horizontally scrollable logs
• UI: Persist panel widths per tab
• UI: Keep log context while searching
• UI: Prevent log rows from wrapping
• UI: Cmd-Delete to delete selected items
• UI: Fixed terminal apps sometimes not being detected
• UI: Fixed logs reappearing after being cleared
• UI: Fixed sidebar account overlap
• Kubernetes: Configurable API server certificate SANs
• Fixed Docker not working in isolated machines
• Fixed corporate intermediate certificates not being trusted
• Fixed CNAME resolution for local domains
• Fixed no-proxy exclusions not being honored
• Fixed Docker port forwards bound to specific IPs
• Fixed cloud-init user creation
• Fixed resuming interrupted Docker migrations
• Fixed recovering corrupted BuildKit cache
• Fixed UDP port exhaustion under heavy load
• Fixed SSH proxy port conflicts
• Fixed Rosetta wrapper showing in process command lines
• Fixed Docker credential migration errors
• Security improvements to the kernel and file sharing
• More bug fixes and performance improvements
• Updates: Linux 7.0.11, Kubernetes 1.34

Activity Monitor TUI: orb top

• Fixed Dirty Frag (CVE-2026-43284) privilege escalation
• Isolated machines: Added setting to block network connections to host/machines
• Isolated machines: Opt-in SSH agent forwarding
• Activity Monitor: adjustable update frequency
• UI: Disabled "Hold ⌘Q to Quit" confirmation by default (now behind a setting)
• UI: Refined Liquid Glass app icon
• UI: Fixed machine terminal sessions not restarting
• UI: Fixed toolbar occasionally getting stuck in disabled state
• UI: Fixed wrong info in container stats tab
• UI: Fixed Cmd-H hiding the app from Dock and Cmd-Tab
• Improved support for passing domain names to proxies
• Partial support for socks5h:// proxy URLs
• Potential fix for domains breaking after Compose restart
• Fixed rare crashes caused by invalid network packets
• Fixed empty username in some isolated machines
• Fixed Kubernetes HTTPS port probing in some setups
• Fixed wildcard k8s.orb.local domains
• More complete fix for MongoDB 8 compatibility issues
• Security improvements to authentication and storage
• Updates: Linux 6.19.14

Fixed MongoDB 8 crashing on v2.1.0

• Selective file sharing mounts in isolated machines
• Per-container Activity Monitor tab
• UI: Sorting options for containers/volumes/images
• UI: Added setting for terminal/logs font size
• UI: Preserve terminal sessions when navigating between tabs
• UI: Allow dots in machine names
• Kubernetes: Fixed CPU and memory metrics
• Kubernetes: Added option to use domain in kubeconfig
• Added http_port and https_port configs for machines
• Added dev.orbstack.compose-icon label for Compose projects
• Skip TLS and HTTP probing when dev.orbstack.http-port is set
• Kernel: added tc police action
• Minor performance improvements
• Fixed integrated terminal wrapping/colors
• Fixed isolated machine toggle not applying until restart
• Fixed Activity Monitor always scrolling to selected item

• Liquid Glass UI on macOS 26
• Isolated machines without file system integration
  • Useful for AI agent sandboxing
• caffeinate command to prevent sleep in machines
• Setting to bypass proxy for specific hosts
• Support for binding Docker port forwards to IPs other than 0.0.0.0 or 127.0.0.1
• UI: Customizable logs font size
• UI: "Hold ⌘Q to Quit" confirmation
• UI: Custom volume icons via dev.orbstack.icon label
• UI: Kubernetes pod and service labels
• UI: Collapsible pod sections
• UI: Custom proxy URL
• UI: New SQL Server icon
• UI: Better terminal app detection
• Fixed Docker Desktop migration crashes
• Fixed high UDP CPU usage
• Fixed rare race in shared file system
• Fixed multiline Docker domain labels
• Fixed leaking container icon files in cache
• Updates: Kubernetes 1.33, Docker 29.4.0, buildx 0.29.1, Compose 2.30.4, runc, Linux 6.19.13
• New distros: Fedora 43, openSUSE 16, Ubuntu 25.10, Devuan Excalibur

• AVX emulation support
• Added dev.orbstack.icon label for custom container icon URLs
• Added volume cloning
• Added port forward firewall settings for security
• Added device-mapper support (LUKS, dm-verity, dm-integrity)
• More graceful container shutdown
• UI: Copyable port numbers
• UI: Resizable log inspector
• UI: Fixed "No Selection" when selecting blank log lines
• UI: Fixed machine terminals opening in the wrong directory
• UI: Fixed occasional terminal-related crashes
• Fixed port forwards not being released
• Fixed upside-down text on macOS 26
• Fixed startup crashes on macOS 15.7
• Fixed "No such file or directory" race in concurrent builds
• Fixed Kubernetes not starting on some machines
• Fixed x86 build and container hangs
• Fixed unnecessary Kubernetes ports being forwarded to macOS
• Fixed Kubernetes failing to mount volumes with colons in path
• Fixed rare "invalid Prefix" crash on start
• Updates: Rocky 10, CentOS 10

Redesigned UI: OrbStack is now a full-fledged container IDE!

• Fast & powerful terminal powered by Ghostty

• File manager for containers, volumes, images, machines

• Fast log viewer with filtering

• Create containers and networks

• Detailed container info, icons, and health check status

• Activity Monitor graphs

• More responsive under high CPU usage

• Slightly faster file system

• More accurate time synchronization

• Customizable IP range for machines and domains

• Many other UI improvements

• Fixed orb.local domains on macOS 26

• Fixed bind mounting /dev into containers

• Fixed "too many open files" on external FAT disks

• Fixed large numbers of port forwards sometimes not working

• Fixed "bad file descriptor" when deleting corrupted machines

• Fixed unusual usernames/group names breaking machine creation

• Support for MPLS and IPv6 segment routing

• Updates: Kubernetes 1.32.6, Docker 28.3.3, Compose 2.39.2, buildx 0.26.1, Linux 6.15.11

• New distros: Debian 14 (testing), Alpine 3.22

• Dropped support for macOS 13