What changed in OrbStack from 1 to 2

New Builds tab for Docker build history, steps, and logs SME support on M4 and newer UI: Added option to wrap log lines UI: Start and stop Supabase CLI stacks with one click UI: Fixed Compose projects splitting into multiple groups UI: Fixed misleading crash dialog when an external data disk fails CLI: Fixed orb push and orb pull for machines, including pushing as root CLI: Fixed terminal output being cleared CLI: Fixed crashes with non-POSIX login shells (e.g. xonsh) USB: Fixed pyserial tools failing to open forwarded serial devices USB: Support for Qualcomm modems Kubernetes: Fixed network policies not being enforced Kubernetes: Fixed high CPU usage Kubernetes: Restored CoreDNS Prometheus metrics Machines: Better error handling for x86 Alma Linux 10 emulation Fixed inbound UDP to host-networking containers (v2.2.2 regression) Fixed UDP packets over 1472 bytes being dropped on port forwards Fixed machine resource limits being reset if the app crashes Fixed ~/.ssh permissions being changed on start Fixed app restart loop when installed with Nix Home Manager

USB: Support for USB webcams, microphones, modems, CAN, Xbox controllers, and audio Improved macOS 27 beta compatibility Slightly lower idle CPU, memory, and battery usage (especially with Kubernetes) Better protection against data corruption, with automatic recovery USB: Fixed crashes, stuck devices, and some external drives USB: Improved serial device support (CP210x, CDC-ACM, non-root access) USB: Better device picker and categories UI: Better disk usage bars in storage settings UI: Log search can now filter to only matching lines UI: Cmd-Delete now asks for confirmation (Cmd-Opt-Delete to skip) UI: Fixed delete shortcut conflicting with terminal input UI: Fixed Compose projects splitting into multiple groups UI: Fixed deleting Compose projects with missing directories UI: Fixed terminal not restarting after exit UI: Fixed crash when changing machine resource limits UI: Fixed missing icons on some containers UI: Fixed creating containers with custom commands CLI: Fixed command output disappearing after exit Fixed microphone not working in machines/containers Fixed docker compose run containers taking over domains Fixed port forwards to specific IPs on ports under 1024 Fixed file watchers missing some changes from macOS Fixed freezes and "file table overflow" errors on NFS/SMB shares Fixed incorrect disk usage on disks over 16 TB Fixed file ownership in gVisor (runsc) containers Fixed docker login keychain errors Fixed Docker containers failing to start inside machines Fixed PPP "operation not permitted" error Fixed cloud-init reboot and x86 machine timeouts Fixed nix-collect-garbage and "Bad fd number" errors in containers Fixed crashes when migrating from Docker Desktop Fixed Docker hanging when containers restart frequently Fixed containers sometimes failing to start after a restart Fixed "Start failed" and "timed out waiting for VM to start" errors Fixed updater errors and app failing to open after updates Fixed rare crashes and freezes Kubernetes: Fixed network policies blocking traffic in kind clusters Added kernel features: fs-verity, Adiantum Updates: Linux 7.0.14, Kubernetes 1.35, runc 1.5.1

USB device passthrough Share serial devices and security keys without disconnecting them from macOS Also supports USB Ethernet, Wi-Fi, SDRs, flash drives, Android phones, and more Sound support (playback and recording) Use voice mode in Claude Code, Codex, and other tools Per-machine CPU, memory, and disk limits Fixed most known hangs and crashes Docker checkpoint/restore (CRIU) support Added buildx Kubernetes driver Added option to set the username during onboarding Added option for containerd image store (supports multiple platforms with same image tag) Improved gVisor (runsc) compatibility UI: Storage usage shown as a capacity bar UI: Kubernetes init containers are now shown UI: Horizontally scrollable logs UI: Persist panel widths per tab UI: Keep log context while searching UI: Prevent log rows from wrapping UI: Cmd-Delete to delete selected items UI: Fixed terminal apps sometimes not being detected UI: Fixed logs reappearing after being cleared UI: Fixed sidebar account overlap Kubernetes: Configurable API server certificate SANs Fixed Docker not working in isolated machines Fixed corporate intermediate certificates not being trusted Fixed CNAME resolution for local domains Fixed no-proxy exclusions not being honored Fixed Docker port forwards bound to specific IPs Fixed cloud-init user creation Fixed resuming interrupted Docker migrations Fixed recovering corrupted BuildKit cache Fixed UDP port exhaustion under heavy load Fixed SSH proxy port conflicts Fixed Rosetta wrapper showing in process command lines Fixed Docker credential migration errors Security improvements to the kernel and file sharing More bug fixes and performance improvements Updates: Linux 7.0.11, Kubernetes 1.34

Fixed 127.0.0.1 port forwards not working when host and container port are the same Fixed Files tab not working on macOS 15 Fixed "timed out waiting for VM to start" Added support for USB Test & Measurement devices (e.g. oscilloscopes) USB stability improvements

Fixed proxy support breaking cross-container connections Fully fixed MongoDB 8 and rseq compatibility issues Updates: Linux 7.0.5

Activity Monitor TUI: orb top Fixed Dirty Frag (CVE-2026-43284) privilege escalation Isolated machines: Added setting to block network connections to host/machines Isolated machines: Opt-in SSH agent forwarding Activity Monitor: adjustable update frequency UI: Disabled "Hold ⌘Q to Quit" confirmation by default (now behind a setting) UI: Refined Liquid Glass app icon UI: Fixed machine terminal sessions not restarting UI: Fixed toolbar occasionally getting stuck in disabled state UI: Fixed wrong info in container stats tab UI: Fixed Cmd-H hiding the app from Dock and Cmd-Tab Improved support for passing domain names to proxies Partial support for socks5h:// proxy URLs Potential fix for domains breaking after Compose restart Fixed rare crashes caused by invalid network packets Fixed empty username in some isolated machines Fixed Kubernetes HTTPS port probing in some setups Fixed wildcard k8s.orb.local domains More complete fix for MongoDB 8 compatibility issues Security improvements to authentication and storage Updates: Linux 6.19.14 OrbStack was not affected by Copy Fail (CVE-2026-31431) or the recent io_uring ZCRX vulnerability.

Fixed MongoDB 8 crashing on v2.1.0 Selective file sharing mounts in isolated machines Per-container Activity Monitor tab UI: Sorting options for containers/volumes/images UI: Added setting for terminal/logs font size UI: Preserve terminal sessions when navigating between tabs UI: Allow dots in machine names Kubernetes: Fixed CPU and memory metrics Kubernetes: Added option to use domain in kubeconfig Added http_port and https_port configs for machines Added dev.orbstack.compose-icon label for Compose projects Skip TLS and HTTP probing when dev.orbstack.http-port is set Kernel: added tc police action Minor performance improvements Fixed integrated terminal wrapping/colors Fixed isolated machine toggle not applying until restart Fixed Activity Monitor always scrolling to selected item

Liquid Glass UI on macOS 26 Isolated machines without file system integration Useful for AI agent sandboxing caffeinate command to prevent sleep in machines Setting to bypass proxy for specific hosts Support for binding Docker port forwards to IPs other than 0.0.0.0 or 127.0.0.1 UI: Customizable logs font size UI: "Hold ⌘Q to Quit" confirmation UI: Custom volume icons via dev.orbstack.icon label UI: Kubernetes pod and service labels UI: Collapsible pod sections UI: Custom proxy URL UI: New SQL Server icon UI: Better terminal app detection Fixed Docker Desktop migration crashes Fixed high UDP CPU usage Fixed rare race in shared file system Fixed multiline Docker domain labels Fixed leaking container icon files in cache Updates: Kubernetes 1.33, Docker 29.4.0, buildx 0.29.1, Compose 2.30.4, runc, Linux 6.19.13 New distros: Fedora 43, openSUSE 16, Ubuntu 25.10, Devuan Excalibur

Fixed issues when using OrbStack machines/containers as VPN servers Fixed IP addresses sometimes not showing up UI: Fixed xterm-ghostty warnings in some distros Updates: Fedora 43, openSUSE 16, Ubuntu 25.10, Devuan Excalibur, Kubernetes 1.33.5, Docker 28.5.2, buildx 0.29.1, Compose 2.30.4, Linux 6.17.8

Fixed x86 Go programs crashing Fixed unreliable WireGuard and other long UDP connections Fixed startup crashes on macOS 15.7.x Fixed indefinite "Starting" state on some installs Updates: Linux 6.17.4

Fixed TLS errors in emulated x86 programs Fixed file system errors and sync issues Fixed slow chown -R since v2.0 Fixed UI sometimes being covered with "App Is In Background" message Added switch to disable Docker Engine if only using machines Temporarily removed AVX support

AVX emulation support Added dev.orbstack.icon label for custom container icon URLs Added volume cloning Added port forward firewall settings for security Added device-mapper support (LUKS, dm-verity, dm-integrity) More graceful container shutdown UI: Copyable port numbers UI: Resizable log inspector UI: Fixed "No Selection" when selecting blank log lines UI: Fixed machine terminals opening in the wrong directory UI: Fixed occasional terminal-related crashes Fixed port forwards not being released Fixed upside-down text on macOS 26 Fixed startup crashes on macOS 15.7 Fixed "No such file or directory" race in concurrent builds Fixed Kubernetes not starting on some machines Fixed x86 build and container hangs Fixed unnecessary Kubernetes ports being forwarded to macOS Fixed Kubernetes failing to mount volumes with colons in path Fixed rare "invalid Prefix" crash on start Updates: Rocky 10, CentOS 10

Customizable kubelet config Refresh button for volume disk usage Added advanced settings to UI Fixed freezes and high CPU usage under heavy I/O Fixed missing logs toolbar on macOS 26 Fixed error loading certain networks in UI New distros: Alma 10