{"id":13831952,"url":"https://github.com/cirruslabs/orchard","last_synced_at":"2026-04-12T21:12:47.377Z","repository":{"id":146904104,"uuid":"585615779","full_name":"cirruslabs/orchard","owner":"cirruslabs","description":"Orchestrator for running Tart Virtual Machines on a cluster of Apple Silicon devices","archived":false,"fork":false,"pushed_at":"2026-02-04T21:50:59.000Z","size":1145,"stargazers_count":264,"open_issues_count":18,"forks_count":21,"subscribers_count":8,"default_branch":"main","last_synced_at":"2026-02-05T07:36:28.274Z","etag":null,"topics":["macos","orchestration","virtualization"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cirruslabs.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2023-01-05T16:15:26.000Z","updated_at":"2026-02-05T05:12:15.000Z","dependencies_parsed_at":"2023-09-23T01:42:22.789Z","dependency_job_id":"af7e9b57-0eea-479b-a2b2-d517503fca33","html_url":"https://github.com/cirruslabs/orchard","commit_stats":null,"previous_names":[],"tags_count":89,"template":false,"template_full_name":null,"purl":"pkg:github/cirruslabs/orchard","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cirruslabs%2Forchard","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cirruslabs%2Forchard/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cirruslabs%2Forchard/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cirruslabs%2Forchard/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cirruslabs","download_url":"https://codeload.github.com/cirruslabs/orchard/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cirruslabs%2Forchard/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29135909,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-05T21:59:57.939Z","status":"ssl_error","status_checked_at":"2026-02-05T21:59:57.628Z","response_time":65,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["macos","orchestration","virtualization"],"created_at":"2024-08-04T10:01:45.352Z","updated_at":"2026-04-12T21:12:47.362Z","avatar_url":"https://github.com/cirruslabs.png","language":"Go","readme":"# Orchard\n\n\u003e [!IMPORTANT]\n\u003e\n\u003e **macOS 15 (Sequoia) or later**\n\u003e\n\u003e The  [newly introduced \"Local Network\" permission](https://developer.apple.com/documentation/technotes/tn3179-understanding-local-network-privacy) in macOS Sequoia requires accepting a GUI pop-up on each host machine that runs the Orchard Worker.\n\u003e\n\u003e To work around this, there are two options. The first one is to invoke the `orchard worker run` as `root` with an additional `--user` command-line argument, which takes a name of your regular, non-privileged user on the host machine.\n\u003e\n\u003e This will cause the Orchard Worker to start a small `orchard localnetworkhelper` process in the background and then drop the privileges to the specified user.\n\u003e\n\u003eThe helper process is privileged and needed to establish network connections on behalf of the Orchard Worker without triggering a GUI pop-up.\n\u003e\n\u003eThis approach is more secure than simply running `orchard worker run` as `root`, because only a small part of Orchard Worker runs privileged and the only functionality that this part has is establishing new connections.\n\u003e\n\u003e The second workaround is to [set local the network privacy preferences](https://developer.apple.com/documentation/technotes/tn3179-understanding-local-network-privacy#macOS-considerations) so that all [IPv4 private address space](https://datatracker.ietf.org/doc/html/rfc1918#section-3) that could potentially be used for VMs is excluded:\n\u003e\n\u003e ```shell\n\u003e sudo defaults write com.apple.network.local-network AllowedEthernetLocalNetworkAddresses -array \"10.0.0.0/8\" \"172.16.0.0/12\" \"192.168.0.0/16\"\n\u003e sudo defaults write com.apple.network.local-network AllowedWiFiLocalNetworkAddresses -array \"10.0.0.0/8\" \"172.16.0.0/12\" \"192.168.0.0/16\"\n\u003e ```\n\u003e\n\u003e ...and then reboot.\n\n\u003cimg src=\"https://github.com/cirruslabs/orchard/raw/main/docs/OrchardSocial.png\"/\u003e\n\nOrchard is an orchestration system for [Tart](https://github.com/cirruslabs/tart). Create a cluster of bare-metal Apple Silicon machines and manage dozens of VMs with ease!\n\n## Usage\n\nThe fastest way to get started with Orchard is to use a local development mode:\n\n```shell\nbrew install cirruslabs/cli/orchard\norchard dev\n```\n\nThis will start Orchard Controller and a single Orchard Worker on your local machine.\n\nYou can interact with the newly created cluster using the `orchard` CLI or programmatically, through the built-in REST API server.\n\nPlease check out the [official documentation](https://tart.run/orchard/quick-start/) for more information and/or feel free to use [issues](https://github.com/cirruslabs/orchard/issues) for the remaining questions.\n","funding_links":[],"categories":["Go"],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcirruslabs%2Forchard","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcirruslabs%2Forchard","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcirruslabs%2Forchard/lists"}