What each one is
Podman Desktop calls itself “the best free and open source tool to work with Containers and Kubernetes”. It is a cross-platform GUI over Podman, Red Hat's “daemonless, open source, Linux native tool” for containers, which can run them as root or as a non-privileged user. On a Mac, Podman needs a Linux virtual machine, the Podman machine, provided by libkrun by default or Apple's hypervisor (applehv). Podman Desktop adds image, container and pod management, extensions, and paths to Kubernetes.
Oxcart is built for one platform and one workflow: Docker-compatible containers on an Apple silicon Mac. Its native Mac interface keeps projects, logs, ports and terminals together, with a Docker-compatible engine built for Apple silicon. It ships the Docker tools developers already use, so docker, docker compose and docker buildx behave the way your scripts, CI configs and teammates expect.
Side by side
| Feature | Oxcart | Podman Desktop |
|---|---|---|
| Platforms | macOS 26 or later, Apple silicon | Mac, Windows and Linux |
| License and price | Proprietary; free for 60 days, then $20 per user per major version | Apache-2.0, free |
| Engine | Docker-compatible engine (Docker API 1.40 to 1.54) | Podman: daemonless, root or non-privileged |
| On macOS | Oxcart's own Linux side, prepared offline in about 2.5 s | A Podman machine (libkrun by default, or applehv) |
| Command-line tools | docker 29.9, Compose 5.6, Buildx 0.38 included | podman |
| Kubernetes | Not built in | kind, Lima, Minikube or OpenShift |
| Latest version | 0.1.4 | 1.29.3 (2026-09-01) |
Why Docker users on a Mac pick Oxcart
The Docker tools, not a translation
Oxcart includes the official docker CLI, Docker Compose and Buildx, and its engine implements the Docker Engine API. Compose features that real projects lean on are verified: healthcheck dependencies with up --wait, service-name DNS, init: true and network_mode: service:. Testcontainers and docker-py build through the Engine API, the Dev Containers CLI starts real projects, and the Docker socket can be mounted into containers for Testcontainers, Portainer and Traefik. amd64 images run through Rosetta.
A lifecycle measured in milliseconds
| Operation | Oxcart | vs next fastest |
|---|---|---|
docker run --rm … true | 42 ms | 3.4× |
docker stop | 19 ms | 5.6× |
| API stop | 4.0 ms | 21× |
| Create and start 20 containers | 0.69 s | 2.5× |
| Stop and remove 20 containers | 77 ms | 8.9× |
| Engine ready after start | 0.8 s | 1.5× |
Oxcart 0.1.2 measured 2026-10-10 with its bundled docker 29.9 client; OrbStack 2.2.3 and Docker Desktop 4.94.0 measured earlier the same day, on the same Mac and harness, with docker 29.4. Docker Desktop's start figure includes launching its app. Podman was not measured.
For test suites that create and destroy containers through the API, as Testcontainers does, those milliseconds multiply: an API create takes 2.5 ms on Oxcart.
Native, quiet and specific
Oxcart's Ports view groups ports by repository, worktree and branch and tells you why one isn't answering. Compose projects are groups with group actions. The menu bar item, with 20 containers running, costs 0.0004 % of a core (the app itself). Setup is offline, asks for one administrator password and one folder-access choice, and never edits your shell profile.
Agents that see your containers
The local MCP server gives Claude Code, Codex, Cursor and other agents 13 tools shaped like their questions, read-only by default, with every call logged on your Mac. In one Claude Code session per task (indicative), finding an error in the logs took 4.2 s instead of 31.0 s. Permission levels are a guard, not a sandbox. More in Docker for AI coding agents.
Security without configuration
Published and outbound TCP between the Mac and the engine is carried in TLS 1.3 with a certificate made at every start and a per-start 256-bit token. The Docker API is on a private Unix socket only. Your docker login passwords go to the macOS Keychain. Updates are EdDSA-signed.
Where Podman Desktop is the better fit
- One tool on every desktop OS. Podman Desktop runs on Mac, Windows and Linux; Oxcart is a Mac app.
- Free and open source. Apache-2.0, no license fee.
- Podman-centered Kubernetes workflows. Podman's pods and its kind, Minikube and OpenShift integrations suit teams that already organize development around those tools.
- Rootless by design. If your security model is built on Podman's daemonless, non-root containers, stay with Podman.
- Intel Macs. Oxcart requires Apple silicon.
Using both
The two coexist. Oxcart adds its own oxcart Docker context and makes it current only if the current one is default with nothing answering. If another app's docker tools are installed, Oxcart lists both versions and asks before replacing them, and Uninstall puts them back. Moving a project is usually just running it: the Compose file and Dockerfile don't change. The steps are in switching to Oxcart.
Questions
Is Podman Desktop free?
Yes. Podman Desktop and Podman are open source under the Apache-2.0 license and free, as of October 2026. Oxcart is free for 60 days, then $20 per user, per major version: not a subscription.
Does Podman on a Mac run in a virtual machine?
Yes. Podman's own documentation says “Podman on MacOS and Windows requires a virtual machine”, the Podman machine, with libkrun as the default provider on macOS and applehv as the alternative. Every container tool on a Mac runs Linux containers on a Linux kernel somewhere; the differences are in the engine, the app and the integration.
Which is faster on a Mac, Oxcart or Podman Desktop?
We have not benchmarked Podman, so we publish no number for it. Against the two runtimes we measured on the same Mac, Oxcart was the fastest of the three at the container lifecycle: docker run --rm in 42 ms, docker stop in 19 ms, and stopping and removing 20 containers in 77 ms.
Can I use the docker command with Oxcart?
Yes. Oxcart ships docker 29.9.0, Docker Compose 5.6.0 and Buildx 0.38.0, and its engine speaks Docker API 1.40 to 1.54. Your existing docker and docker compose commands, Testcontainers and the Dev Containers CLI work against it.
Which one should I use for Kubernetes?
Choose Podman Desktop if you want desktop integration for local clusters with kind or the Minikube extension. Choose Oxcart for fast local app development and image builds alongside a shared or cloud cluster. Oxcart supports privileged containers as part of its Docker workflow. See Kubernetes on a Mac.
Does Oxcart run rootless or daemonless like Podman?
Oxcart runs a Docker-compatible engine, so it is not daemonless. On the Mac side, the supervisor, the file sharing and the app run as your user; the only root component is a helper that macOS starts on demand to link Oxcart's five command-line tools, and it exits 10 s after its last request.
My team uses Windows and Linux too. Does that rule out Oxcart?
No. Images and Compose files are portable, so Mac users can run Oxcart while Linux users run Docker Engine or Podman and Windows users run WSL 2 with the tool of their choice. Oxcart is the Mac pick; see tools for Mac, Linux and Windows.
Sources and method
- Oxcart speed: Oxcart 0.1.2, 2026-10-10, Apple M5 Max (36 GiB), macOS 27.2, 8 CPUs and 12 GiB, one product at a time, medians of five samples after a warmup. OrbStack 2.2.3 and Docker Desktop 4.94.0 measured earlier the same day on the same Mac and harness with docker 29.4.
- Podman Desktop platforms and Kubernetes: https://podman-desktop.io/docs/intro and https://podman-desktop.io/docs/kind; license and latest release: https://github.com/podman-desktop/podman-desktop.
- Podman: https://docs.podman.io/en/latest/ and https://docs.podman.io/en/latest/markdown/podman-machine.1.html; license: https://github.com/containers/podman. All checked 2026-10-10.