macSandbox for Windows

Disposable Windows 11 ARM64 sandbox for Apple Silicon Macs — the Windows Sandbox experience, on macOS. Boot a throwaway Windows environment in seconds from a prebuilt base image; every change is discarded on exit.

Runtime: QEMU + Hypervisor.framework (HVF) for virtualization, with an in-app embedded RDP view (libfreerdp) for display, input, clipboard, folder, printer, and audio redirection. The base image is built once from your own Windows 11 ARM64 ISO via a fully deterministic, unattended WinPE + DISM deployment — no clicks, no prompts.

Features

• Disposable by design — copy-on-write overlay per session; discarded on exit
• One-time unattended baseline build from your Windows 11 ARM64 ISO (deterministic WinPE/DISM deployment, virtio driver injection, Edge first-run experience disabled, inbox bloatware removed)
• In-app RDP session — no external windows; dynamic resolution, HiDPI (Retina) scaling, trackpad scrolling and pinch-to-zoom
• Windows Sandbox .wsb compatibility — see WSB-SUPPORT.md and examples/sample.wsb
• Clipboard (text and files, both directions), shared folders (\\tsclient auto-mount), printer redirection (CUPS), audio playback and microphone
• Localized UI — English, 한국어, 日本語, Deutsch, Español, Français; Korean/Japanese keyboard layouts (right Option = 한/영)
• License-aware — confirms Windows licensing checklist before every base image build; this project ships no Windows OS, key, or entitlement

Requirements

• Apple Silicon Mac, macOS 14 (Sonoma) or later
• A Windows 11 ARM64 ISO you are licensed to use (e.g., from Microsoft's official download channels)
• Homebrew: brew install freerdp wimlib
• Disk space: ~24 GB free during baseline build

Build & Run

# Development build
swift build && .build/debug/MacSandbox

# Packaged .app + DMG (bundles QEMU; see scripts/build.sh for vendor setup)
scripts/package_app.sh

On first launch the app asks for your Windows 11 ARM64 ISO and builds the baseline image unattended (one round, typically 20–40 minutes). After that, every launch boots a fresh disposable sandbox straight into an in-app RDP session.

Command-line options mirror .wsb settings:

MacSandbox my-config.wsb
MacSandbox --memory 8192 --cpus 4 --folder ~/Downloads:ro --logon "notepad"

Documentation

• ARCHITECTURE.md — how the deterministic WinPE/DISM baseline build and the QEMU + embedded-RDP runtime work
• WSB-SUPPORT.md — .wsb configuration support matrix
• Project website (GitHub Pages, served from docs/)

Licensing

macSandbox for Windows is dual-licensed:

1. GNU AGPL-3.0-or-later (open-source edition) — see LICENSE
2. Commercial license — see COMMERCIAL-LICENSE.md

Bundled third-party components (QEMU, EDK2 firmware, etc.) and linked libraries (FreeRDP/WinPR) remain under their own licenses — see LICENSING.md, THIRD-PARTY-NOTICES.md and WRITTEN-OFFER.txt. QEMU runs strictly as a separate process; do not link it in-process (see the invariant in LICENSING.md).

This project does not include Windows. You must provide your own Windows 11 ARM64 ISO and hold a valid license for each Windows instance you run. macSandbox for Windows is an independent project, not affiliated with or endorsed by Microsoft. Windows is a trademark of the Microsoft group of companies.

Contributing & Support

• Bug reports and feature requests are accepted only via GitHub Issues. There is no e-mail support channel.
• External contributions require agreeing to the CLA, which enables the project's dual-licensing model (AGPL + commercial).

---

© 2026 Nam Jung Hyun (rkttu)