Colima Integration Guide

Overview

Colima provides container runtimes on macOS with minimal setup. Cup’n’String automatically scans active Colima profiles, identifying socket files to govern running container applications.

Support level

Auto-Discovered

What Cup’n’String detects

• Active Colima profile sockets
• Lima virtual machine process mappings
• Running container instances and ports

What it governs

• Access rules for local service proxying
• Secure Relay tunnel creation for Lima VMs
• Process boundary traffic attribution

Recommended policies

• Automatically inventory running containers under all Colima profiles
• Apply strict host-to-VM socket access rules
• Require admin approval to expose local VM ports externally

Setup outline

1. Ensure the Cup’n’String agent is running on macOS.
2. Start Colima (colima start).
3. The agent detects the colima socket path (~/.colima/default/docker.sock) and registers it.

Verification

Check that services running inside Colima are correctly listed in the discovered local runtimes catalog.

Troubleshooting

Verify Colima is active via colima status and that socket paths match default profile locations.

Known limitations

Deep metadata retrieval is dependent on the Docker API compatibility layer inside the Lima VM.