OrbStack Integration Guide

Overview

OrbStack provides fast, lightweight container runtimes on macOS. Cup’n’String features native integration with OrbStack, scanning context metadata and mapping virtual machine domains (*.orb.local) to simplify internal service discovery.

Support level

Native Integration

What Cup’n’String detects

• Active OrbStack container VM contexts
• Display domains (*.orb.local) mapped to running services
• Container process parentage and network routes

What it governs

• Context-specific access policies
• Virtual host attribution and routing metadata
• Process and firewall container boundaries

Recommended policies

• Enable automatic discovery for all OrbStack container VM sockets
• Audit outbound container VM routes to verify they comply with tenant standards
• Block unapproved bridge networking configurations

Setup outline

1. Ensure the Cup’n’String agent is active on macOS.
2. Spin up containers or Linux machines under OrbStack.
3. The agent natively queries the OrbStack control API to map active environments.

Verification

Open the Supported Environments catalog or Tenant Admin console to verify OrbStack virtual machines are active and correctly attributed.

Troubleshooting

Verify OrbStack is running and the command-line helper orb is in the user’s PATH.

Known limitations

Limited to macOS hosts.