Disabling file sharing feature for isolation

[siketyan]

Is your feature request related to a problem? Please describe.
When I want to run a virtual machine as isolated from the host, such as running a GitHub Actions Self-Hosted Runner, I want to disable bidirectional file sharing between macOS and Linux.

Describe the solution you'd like
It would be great if we can disable file sharing for a specific Linux instance explicitly.

Describe alternatives you've considered
N/A

Additional context
N/A

[kdrag0n]

This is planned but it's worth nothing that similar to WSL, the shared lightweight kernel/VM that runs Docker and machines will always have access to the underlying mounts. This means that it's not advisable to rely on them for true security purposes, as a Linux kernel vulnerability would allow mounting the shared file system anyway.

However, as long as the Linux kernel's security is not compromised, this should be an effective form of access control.

[dnaq]

It would be great for my use cases if it was possible to set up specific file shares between the host and VM, not just to have an all or nothing approach. Having support for that would allow me to move completely to orbstack and not have to use UTM/parallels anymore.

[kdrag0n]

It would be great for my use cases if it was possible to set up specific file shares between the host and VM, not just to have an all or nothing approach. Having support for that would allow me to move completely to orbstack and not have to use UTM/parallels anymore.

@dnaq Can you elaborate on why that's a must-have for your use case?

[dnaq]

Sure. There are mostly two main reasons:

1. Client requirements, e.g. it’s ok for the client that the VM can read/write a client specific folder on the host, as long as other VMs can’t read that folder. Host is trusted, VMs aren’t to that extent.
2. Analysis of untrusted (potentially malicious) code, where the results of the analysis are needed outside of the VM. I realise that there is always the possibility of kernel/vm escapes, but that risk is much lower than malicious user space code.

Hope that helps

[FreeIdom]

I have the same needs, please consider allow specific file shares between the host and VM

[ludwig-gramberg]

+1 on chosing to share specific folders between mac and the vm
just consider a badly ran command in the vm can delete a lot of files on the host

[kdrag0n]

Update: This has been mostly implemented internally for several versions, but there are a few remaining gaps to close before it'll actually have any security value. That's why it hasn't been exposed yet.

If you want specific file sharing paths, please open a separate issue.