Agent-Sicherheit

Antwort zur Agent-Sicherheit

colima controls local container and Kubernetes runtimes used by developer workflows.

Credential-Zugriff

Can expose mounted files, container credentials, and runtime config.

Änderungen an Remote-Zustand

Primarily local, but containers can call remote services.

Publish-/Artefakt-Risiko

Can affect containerized build artifacts and local cluster state.

Empfohlene Kontrolle

Gate privileged runtime changes, mounts, and Kubernetes enablement.

Hinweise für Agent-Nutzung

Allow status checks; require approval for start options exposing host paths or privileged runtimes.

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%

brew install colima

local Homebrew formula metadata

MacPortsverifiziert · 94%

sudo port install colima

MacPorts ports tree · sysutils/colima/Portfile · Quelle: api.github.com

Linux

Nixverifiziert · 92%

nix profile install nixpkgs#colima

nixpkgs package indexes · pkgs/by-name/co/colima/package.nix · Quelle: api.github.com

Überblick

Paketzusammenfassung

Container runtimes on MacOS (and Linux) with minimal setup

Projektlinks

Befehle und Aliase

colima

Verlauf

Projektgeschichte und Nutzung

Colima is a command-line tool for running container runtimes on macOS and Linux with minimal setup, built around Lima virtual machines.

Projektgeschichte

The official README states the project goal as providing container runtimes on macOS with minimal setup and explains the name as Containers on Lima. It also notes the transitive meaning Containers on Linux Machines because Lima is also described as Linux Machines.

Colima grew from a Docker-oriented local runtime into a multi-runtime tool supporting Docker, containerd, Kubernetes, Incus, and newer GPU-accelerated AI workload support.

Adoptionsgeschichte

Colima became popular in package-manager culture as a lightweight alternative path for local Docker-compatible development on macOS, especially after Docker Desktop licensing and resource-use concerns made VM-backed open tooling more attractive.

The official installation docs list Homebrew, MacPorts, Nix, Mise, Arch/AUR, release binaries, and source builds, reflecting broad distribution across developer package ecosystems.

Wie es verwendet wird

Typical usage is brew install colima followed by colima start, after which Docker, containerd/nerdctl, Kubernetes, or Incus clients can target the VM-backed runtime. Configuration is normally edited with colima start --edit or the colima template command.

Warum Paket-Nerds sich dafür interessieren

Colima is packaging-significant because it coordinates several separately packaged tools: Lima for virtual machines, Docker or containerd clients, kubectl for Kubernetes, and optional Incus or AI workload tooling.

Zeitleiste

2020s: Colima emerges as Containers on Lima for macOS container runtimes.
v0.7.0: Official README documents Incus runtime support.
v0.10.0: Official README documents GPU-accelerated AI workload support using krunkit.
2020s: Official install docs list Homebrew, MacPorts, Nix, Mise, Arch/AUR, binaries, and source builds.

Related projects

Official docs directly relate Colima to Lima, Docker, containerd, Kubernetes, nerdctl, Incus, and krunkit.

Quellen

Sicherheitslage

Risikostufe: orange

container and virtual machine infrastructure.

Risikoklassifikator

orange Risiko · hoch Konfidenz · infrastructure

Warum

container and virtual machine infrastructure

Signale

override:colima

Installationsverhalten

In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
Formelmetadaten deklarieren einen Service- oder Daemon-Block.
Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
Installiert mit 1 Laufzeitabhängigkeiten.
Build-Metadaten listen 1 Build-Abhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix: ~/.colima/default/colima.yaml~/.colima/<profile-name>/colima.yaml~/.colima/_templates/default.yaml

Executables

Installierte Executables

Befehl	Art	Sichtbarkeit	Hinweis
`colima`	cli	globales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-25

Manager-Version0.10.3

Manager aktualisiert2026-06-04

lokale DatenOK

Upstreamnot checked

neueste erkannte Versionnicht erkannt

https://github.com/abiosoft/colima

InfoNo cached GitHub release or tag data was available.https://github.com/abiosoft/colimanone Konfidenz

Installationsmetadaten

Paketmetadaten

Paketschlüssel	brew:colima
Version	0.10.3
Paketmanager	Homebrew
Paketmanager-Seite	https://formulae.brew.sh/formula/colima
Homepage	https://colima.run
Repository	https://github.com/abiosoft/colima
Upstream-Dokumentation	https://colima.run/docs
Lizenz	MIT
Quellarchiv	https://github.com/abiosoft/colima.git
Zuletzt aktualisiert	2026-06-04T18:20:36Z
Pulse	updated
Abhängigkeiten	lima
Build-Abhängigkeiten	go
Bottle	verfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install	nicht definiert
Dienst	declared

Registry-Fakten

Details aus der Quelldatenbank

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	colima
Version Scheme	0
Revision	0
Head Version	HEAD
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	head stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Nix95%

colima

nix profile install nixpkgs#colima

normalized package name match
Abgeglichen nach: Colima

nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/co/colima/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

MacPorts95%

colima

sudo port install colima

normalized package name match
Abgeglichen nach: Colima

MacPorts ports tree · api.github.com · MacPorts ports tree: sysutils/colima/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

Paketgraph

Links stammen aus dem lokalen Paketbeziehungsgraph, Ergänzungen, Abhängigkeitskanten, Ecosystem-Matches und Paket-Hub-Mitgliedschaft.

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Combined YAML source

View the package source record on GitHub.

combined/colima.yml

Verwendete Quellen

Geiger risk classifier
Nucleus package database
av.db category and tag curation
cross-ecosystem install command graph
curated agent safety answer
curated configuration and credential file locations
curated package history
external package-manager database matches
package relationship graph
package version freshness
package-page enrichment

colima mit Homebrew, MacPorts, Nix installieren