← Monday, October 5, 2026ArchitectureDeep dive

Docker Desktop has used a Linux virtual machine since 2016

dave.recoil.org 3 min read Editor score 7/10

The piece explains how Docker Desktop runs workloads inside a VM with a stripped-down Linux kernel, contrasting microVMs with containers and describing the earlier unikernel approach. It clarifies the isolation architecture behind a widely used developer platform.

What: Docker Desktop runs Linux workloads in a virtual machine, an approach the excerpt describes as microVM-like and dating to 2016.
How: Docker embedded a single-purpose VMM in its app; its design uses a minimal Linux VM and a userspace networking stack called vpnkit.
Why it matters: A limited host-to-VM interface can reduce code that must be trusted and help engineers reason about isolation and networking policy.

Docker Desktop embeds a VMM that runs a minimal Linux VM and uses vpnkit for networking. Sketched from the article's own text.

Read on dave.recoil.org → Hacker News · 40 comments

Discussion

Discussion is not switched on yet. Use Note above to keep your own thoughts on this story.

Headline, summary, brief and diagram are written by a model from the source's own text; the link, byline and numbers come from the source. Read the original before relying on a claim.