flaky test: docker install on macOS 14 (arm64)

[crazy-max]

Similar to docker/setup-docker-action#53 (comment), no virt on macOS arm 😢.

https://github.com/docker/actions-toolkit/actions/runs/8828949944/job/24238960153?pr=316#step:6:332

/opt/homebrew/bin/limactl start --name=docker-actions-toolkit --cpus 4 --memory 8
  time="2024-04-25T07:55:11Z" level=warning msg="provisioning scripts should not reference the LIMA_CIDATA variables"
  time="2024-04-25T07:55:11Z" level=info msg="Using the existing instance \"docker-actions-toolkit\""
  time="2024-04-25T07:55:11Z" level=warning msg="provisioning scripts should not reference the LIMA_CIDATA variables"
  time="2024-04-25T07:55:11Z" level=warning msg="provisioning scripts should not reference the LIMA_CIDATA variables"
  time="2024-04-25T07:55:11Z" level=info msg="Starting the instance \"docker-actions-toolkit\" with VM driver \"qemu\""
  time="2024-04-25T07:55:11Z" level=info msg="QEMU binary \"/opt/homebrew/bin/qemu-system-aarch64\" seems properly signed with the \"com.apple.security.hypervisor\" entitlement"
  time="2024-04-25T07:55:11Z" level=warning msg="provisioning scripts should not reference the LIMA_CIDATA variables"
  time="2024-04-25T07:55:11Z" level=info msg="Attempting to download the image" arch=aarch64 digest= location="https://cloud.debian.org/images/cloud/bookworm/20231013-1532/debian-12-genericcloud-arm64-20231013-1532.qcow2"
  Downloading the image (debian-12-genericcloud-arm64-20231013-1532.qcow2)
  
  92.37 MiB / 247.62 MiB (37.30%) ? p/s
  220.27 MiB / 247.62 MiB (88.95%) 25.58 MiB/s
  247.62 MiB / 247.62 MiB (100.00%) 40.82 MiB/stime="2024-04-25T07:55:24Z" level=info msg="Downloaded the image from \"[https://cloud.debian.org/images/cloud/bookworm/20231013-1532/debian-12-genericcloud-arm64-20231013-1532.qcow2\](https://cloud.debian.org/images/cloud/bookworm/20231013-1532/debian-12-genericcloud-arm64-20231013-1532.qcow2/)""
  time="2024-04-25T07:55:24Z" level=warning msg="[hostagent] provisioning scripts should not reference the LIMA_CIDATA variables"
  time="2024-04-25T07:55:24Z" level=warning msg="[hostagent] provisioning scripts should not reference the LIMA_CIDATA variables"
  time="2024-04-25T07:55:24Z" level=warning msg="[hostagent] provisioning scripts should not reference the LIMA_CIDATA variables"
  time="2024-04-25T07:55:24Z" level=info msg="[hostagent] hostagent socket created at /Users/runner/.lima/docker-actions-toolkit/ha.sock"
  time="2024-04-25T07:55:24Z" level=info msg="[hostagent] Using system firmware (\"/opt/homebrew/share/qemu/edk2-aarch64-code.fd\")"
  time="2024-04-25T07:55:24Z" level=info msg="[hostagent] Starting QEMU (hint: to watch the boot progress, see \"/Users/runner/.lima/docker-actions-toolkit/serial*.log\")"
  time="2024-04-25T07:55:24Z" level=info msg="SSH Local Port: 49215"
  time="2024-04-25T07:55:24Z" level=info msg="[hostagent] Waiting for the essential requirement 1 of 4: \"ssh\""
  time="2024-04-25T07:55:24Z" level=info msg="[hostagent] Driver stopped due to error: \"signal: abort trap\""
  time="2024-04-25T07:55:24Z" level=info msg="[hostagent] Shutting down the host agent"
  time="2024-04-25T07:55:24Z" level=warning msg="[hostagent] failed to exit SSH master" error="failed to execute `ssh -O exit -p 49215 127.0.0.1`, out=\"Control socket connect(/Users/runner/.lima/docker-actions-toolkit/ssh.sock): No such file or directory\\r\\n\": exit status 255"
  time="2024-04-25T07:55:24Z" level=info msg="[hostagent] Shutting down QEMU with ACPI"
  time="2024-04-25T07:55:24Z" level=warning msg="[hostagent] failed to open the QMP socket \"/Users/runner/.lima/docker-actions-toolkit/qmp.sock\", forcibly killing QEMU" error="dial unix /Users/runner/.lima/docker-actions-toolkit/qmp.sock: connect: connection refused"
  time="2024-04-25T07:55:24Z" level=info msg="[hostagent] QEMU has already exited"
  time="2024-04-25T07:55:24Z" level=fatal msg="exiting, status={Running:false Degraded:false Exiting:true Errors:[] SSHLocalPort:0} (hint: see \"/Users/runner/.lima/docker-actions-toolkit/ha.stderr.log\")"
### /Users/runner/.lima/docker-actions-toolkit/ha.stderr.log:
{"level":"warning","msg":"provisioning scripts should not reference the LIMA_CIDATA variables","time":"2024-04-25T07:55:24Z"}
{"level":"warning","msg":"provisioning scripts should not reference the LIMA_CIDATA variables","time":"2024-04-25T07:55:24Z"}
{"level":"warning","msg":"provisioning scripts should not reference the LIMA_CIDATA variables","time":"2024-04-25T07:55:24Z"}
{"level":"debug","msg":"executing [ssh-keygen -t ed25519 -q -N  -f /Users/runner/.lima/_config/user]","time":"2024-04-25T07:55:24Z"}
{"level":"debug","msg":"Creating iso file /Users/runner/.lima/docker-actions-toolkit/cidata.iso","time":"2024-04-25T07:55:24Z"}
{"level":"debug","msg":"Using /var/folders/3m/p59k4qdj0f17st0gn2cmj3640000gn/T/diskfs_iso3971499752 as workspace","time":"2024-04-25T07:55:24Z"}
{"level":"debug","msg":"Failed to detect CPU features. Assuming that AES acceleration is available on this Apple silicon.","time":"2024-04-25T07:55:24Z"}
{"level":"debug","msg":"OpenSSH version 9.6.1 detected","time":"2024-04-25T07:55:24Z"}
{"level":"debug","msg":"AES accelerator seems available, prioritizing aes128-gcm@openssh.com and aes256-gcm@openssh.com","time":"2024-04-25T07:55:24Z"}
{"level":"info","msg":"hostagent socket created at /Users/runner/.lima/docker-actions-toolkit/ha.sock","time":"2024-04-25T07:55:24Z"}
{"level":"debug","msg":"Start udp DNS listening on: 127.0.0.1:52205","time":"2024-04-25T07:55:24Z"}
{"level":"debug","msg":"Start tcp DNS listening on: 127.0.0.1:49216","time":"2024-04-25T07:55:24Z"}
{"level":"debug","msg":"QEMU version 8.2.2 detected","time":"2024-04-25T07:55:24Z"}
{"level":"debug","msg":"firmware candidates = [/Users/runner/.local/share/qemu/edk2-aarch64-code.fd /opt/homebrew/share/qemu/edk2-aarch64-code.fd /usr/share/AAVMF/AAVMF_CODE.fd /usr/share/qemu-efi-aarch64/QEMU_EFI.fd]","time":"2024-04-25T07:55:24Z"}
{"level":"info","msg":"Using system firmware (\"/opt/homebrew/share/qemu/edk2-aarch64-code.fd\")","time":"2024-04-25T07:55:24Z"}
{"level":"info","msg":"Starting QEMU (hint: to watch the boot progress, see \"/Users/runner/.lima/docker-actions-toolkit/serial*.log\")","time":"2024-04-25T07:55:24Z"}
{"level":"debug","msg":"qCmd.Args: [/opt/homebrew/bin/qemu-system-aarch64 -m 8192 -cpu host -machine virt,accel=hvf -smp 4,sockets=1,cores=4,threads=1 -drive if=pflash,format=raw,readonly=on,file=/opt/homebrew/share/qemu/edk2-aarch64-code.fd -boot order=c,splash-time=0,menu=on -drive file=/Users/runner/.lima/docker-actions-toolkit/diffdisk,if=virtio,discard=on -drive id=cdrom0,if=none,format=raw,readonly=on,file=/Users/runner/.lima/docker-actions-toolkit/cidata.iso -device virtio-scsi-pci,id=scsi0 -device scsi-cd,bus=scsi0.0,drive=cdrom0 -netdev user,id=net0,net=192.168.5.0/24,dhcpstart=192.168.5.15,hostfwd=tcp:127.0.0.1:49215-:22 -device virtio-net-pci,netdev=net0,mac=52:55:55:35:03:b3 -device virtio-rng-pci -audiodev none,id=default -device ich9-intel-hda -device hda-output,audiodev=default -display none -device virtio-gpu -device virtio-keyboard-pci -device virtio-mouse-pci -device qemu-xhci,id=usb-bus -parallel none -chardev socket,id=char-serial,path=/Users/runner/.lima/docker-actions-toolkit/serial.sock,server=on,wait=off,logfile=/Users/runner/.lima/docker-actions-toolkit/serial.log -serial chardev:char-serial -chardev socket,id=char-serial-pci,path=/Users/runner/.lima/docker-actions-toolkit/serialp.sock,server=on,wait=off,logfile=/Users/runner/.lima/docker-actions-toolkit/serialp.log -device pci-serial,chardev=char-serial-pci -chardev socket,id=char-serial-virtio,path=/Users/runner/.lima/docker-actions-toolkit/serialv.sock,server=on,wait=off,logfile=/Users/runner/.lima/docker-actions-toolkit/serialv.log -device virtio-serial-pci,id=virtio-serial0,max_ports=1 -device virtconsole,chardev=char-serial-virtio,id=console0 -chardev socket,id=char-qmp,path=/Users/runner/.lima/docker-actions-toolkit/qmp.sock,server=on,wait=off -qmp chardev:char-qmp -chardev socket,path=/Users/runner/.lima/docker-actions-toolkit/ga.sock,server=on,wait=off,id=qga0 -device virtio-serial -device virtserialport,chardev=qga0,name=io.lima-vm.guest_agent.0 -name lima-docker-actions-toolkit -pidfile /Users/runner/.lima/docker-actions-toolkit/qemu.pid]","time":"2024-04-25T07:55:24Z"}
{"level":"info","msg":"Waiting for the essential requirement 1 of 4: \"ssh\"","time":"2024-04-25T07:55:24Z"}
{"level":"debug","msg":"executing script \"ssh\"","time":"2024-04-25T07:55:24Z"}
{"level":"debug","msg":"executing ssh for script \"ssh\": /usr/bin/ssh [ssh -F /dev/null -o IdentityFile=\"/Users/runner/.lima/_config/user\" -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o NoHostAuthenticationForLocalhost=yes -o GSSAPIAuthentication=no -o PreferredAuthentications=publickey -o Compression=no -o BatchMode=yes -o IdentitiesOnly=yes -o Ciphers=\"^aes128-gcm@openssh.com,aes256-gcm@openssh.com\" -o User=runner -o ControlMaster=auto -o ControlPath=\"/Users/runner/.lima/docker-actions-toolkit/ssh.sock\" -o ControlPersist=yes -p 49215 127.0.0.1 -- /bin/bash]","time":"2024-04-25T07:55:24Z"}
{"level":"debug","msg":"stdout=\"\", stderr=\"ssh: connect to host 127.0.0.1 port 49215: Connection refused\\r\\n\", err=failed to execute script \"ssh\": stdout=\"\", stderr=\"ssh: connect to host 127.0.0.1 port 49215: Connection refused\\r\\n\": exit status 255","time":"2024-04-25T07:55:24Z"}
{"level":"debug","msg":"qemu[stderr]: qemu-system-aarch64: Error: HV_UNSUPPORTED","time":"2024-04-25T07:55:24Z"}
{"level":"info","msg":"Driver stopped due to error: \"signal: abort trap\"","time":"2024-04-25T07:55:24Z"}
{"level":"info","msg":"Shutting down the host agent","time":"2024-04-25T07:55:24Z"}
{"level":"debug","msg":"shutting down the SSH master","time":"2024-04-25T07:55:24Z"}
{"level":"debug","msg":"executing ssh for exiting the master: /usr/bin/ssh [ssh -F /dev/null -o IdentityFile=\"/Users/runner/.lima/_config/user\" -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o NoHostAuthenticationForLocalhost=yes -o GSSAPIAuthentication=no -o PreferredAuthentications=publickey -o Compression=no -o BatchMode=yes -o IdentitiesOnly=yes -o Ciphers=\"^aes128-gcm@openssh.com,aes256-gcm@openssh.com\" -o User=runner -o ControlMaster=auto -o ControlPath=\"/Users/runner/.lima/docker-actions-toolkit/ssh.sock\" -o ControlPersist=yes -O exit -p 49215 127.0.0.1]","time":"2024-04-25T07:55:24Z"}
{"error":"failed to execute `ssh -O exit -p 49215 127.0.0.1`, out=\"Control socket connect(/Users/runner/.lima/docker-actions-toolkit/ssh.sock): No such file or directory\\r\\n\": exit status 255","level":"warning","msg":"failed to exit SSH master","time":"2024-04-25T07:55:24Z"}
{"level":"info","msg":"Shutting down QEMU with ACPI","time":"2024-04-25T07:55:24Z"}
{"error":"dial unix /Users/runner/.lima/docker-actions-toolkit/qmp.sock: connect: connection refused","level":"warning","msg":"failed to open the QMP socket \"/Users/runner/.lima/docker-actions-toolkit/qmp.sock\", forcibly killing QEMU","time":"2024-04-25T07:55:24Z"}
{"level":"info","msg":"QEMU has already exited","time":"2024-04-25T07:55:24Z"}
### /Users/runner/.lima/docker-actions-toolkit/ha.stdout.log:
{"time":"2024-04-25T07:55:24.722092Z","status":{"sshLocalPort":49215}}
{"time":"2024-04-25T07:55:24.779903Z","status":{"exiting":true}}

[cowwoc]

Per https://apple.stackexchange.com/a/473306/21181 macOS 15.0 supports nested virtualization. Does that mean that it should be possible to support Docker in GitHub macOS runners?

[yeikel]

Per https://apple.stackexchange.com/a/473306/21181 macOS 15.0 supports nested virtualization. Does that mean that it should be possible to support Docker in GitHub macOS runners?

I tried today using the macos-latest runners and I saw a similar error as above. This seems to be because Nested Virtualization is only possible on M3+ when runners use M1

Hardware Overview:

  Model Name: Apple Virtual Machine 1
  Model Identifier: VirtualMac2,1
  Model Number: VM0001LL/A
  Chip: Apple M1 (Virtual)
  Total Number of Cores: 3
  Memory: 7 GB
  System Firmware Version: 13822.1.2
  OS Loader Version: 13822.1.2
  Serial Number (system): ZPD44W9VF6
  Hardware UUID: 383011EA-AD12-5E15-B254-1A215BA6482E
  Provisioning UDID: d1421a260ab103f734fd6f414b4e69f1b0d4bdad
  Activation Lock Status: Disabled

/Users/runner/.lima/docker-actions-toolkit/ha.stderr.log:

{"level":"debug","msg":"ResolveVMType: resolved VMType "qemu" (explicitly specified in []LimaYAML{o,y,d}[1])","time":"2025-09-25T01:14:19Z"}
{"level":"warning","msg":"provisioning scripts should not reference the LIMA_CIDATA variables","time":"2025-09-25T01:14:19Z"}
{"level":"warning","msg":"provisioning scripts should not reference the LIMA_CIDATA variables","time":"2025-09-25T01:14:19Z"}
{"level":"debug","msg":"executing [ssh-keygen -t ed25519 -q -N -C lima -f /Users/runner/.lima/_config/user]","time":"2025-09-25T01:14:19Z"}
{"level":"warning","msg":"provisioning scripts should not reference the LIMA_CIDATA variables","time":"2025-09-25T01:14:19Z"}
{"level":"debug","msg":"Decompressing /opt/homebrew/share/lima/lima-guestagent.Linux-aarch64.gz","time":"2025-09-25T01:14:19Z"}
{"level":"debug","msg":"Creating iso file /Users/runner/.lima/docker-actions-toolkit/cidata.iso","time":"2025-09-25T01:14:19Z"}
{"level":"debug","msg":"Using /var/folders/q0/wmf37v850txck86cpnvwm_zw0000gn/T/diskfs_iso1774843474 as workspace","time":"2025-09-25T01:14:19Z"}
{"level":"debug","msg":"Failed to detect CPU features. Assuming that AES acceleration is available on this Apple silicon.","time":"2025-09-25T01:14:19Z"}
{"level":"debug","msg":"OpenSSH version 9.9.2 detected, is GSSAPI supported: true","time":"2025-09-25T01:14:19Z"}
{"level":"debug","msg":"AES accelerator seems available, prioritizing aes128-gcm@openssh.com and aes256-gcm@openssh.com","time":"2025-09-25T01:14:19Z"}
{"level":"info","msg":"hostagent socket created at /Users/runner/.lima/docker-actions-toolkit/ha.sock","time":"2025-09-25T01:14:19Z"}
{"level":"debug","msg":"Start tcp DNS listening on: 127.0.0.1:49217","time":"2025-09-25T01:14:19Z"}
{"level":"debug","msg":"Start udp DNS listening on: 127.0.0.1:51260","time":"2025-09-25T01:14:19Z"}
{"level":"debug","msg":"QEMU version 10.1.0 detected","time":"2025-09-25T01:14:19Z"}
{"level":"debug","msg":"firmware candidates = [/Users/runner/.local/share/qemu/edk2-aarch64-code.fd /opt/homebrew/share/qemu/edk2-aarch64-code.fd /opt/homebrew/bin/share/edk2-aarch64-code.fd /usr/share/edk2/aarch64/QEMU_CODE.fd /usr/share/AAVMF/AAVMF_CODE.fd /usr/share/qemu-efi-aarch64/QEMU_EFI.fd]","time":"2025-09-25T01:14:19Z"}
{"level":"info","msg":"Using system firmware ("/opt/homebrew/share/qemu/edk2-aarch64-code.fd")","time":"2025-09-25T01:14:19Z"}
{"level":"info","msg":"Starting QEMU (hint: to watch the boot progress, see "/Users/runner/.lima/docker-actions-toolkit/serial.log")","time":"2025-09-25T01:14:19Z"}
{"level":"debug","msg":"qCmd.Args: [/opt/homebrew/bin/qemu-system-aarch64 -m 3584 -cpu host -machine virt,accel=hvf -smp 3,sockets=1,cores=3,threads=1 -drive if=pflash,format=raw,readonly=on,file=/opt/homebrew/share/qemu/edk2-aarch64-code.fd -boot order=c,splash-time=0,menu=on -drive file=/Users/runner/.lima/docker-actions-toolkit/diffdisk,if=virtio,discard=on -drive id=cdrom0,if=none,format=raw,readonly=on,file=/Users/runner/.lima/docker-actions-toolkit/cidata.iso -device virtio-scsi-pci,id=scsi0 -device scsi-cd,bus=scsi0.0,drive=cdrom0 -netdev user,id=net0,net=192.168.5.0/24,dhcpstart=192.168.5.15,hostfwd=tcp:127.0.0.1:49216-:22 -device virtio-net-pci,netdev=net0,mac=52:55:55:df:53:a6 -device virtio-rng-pci -audiodev none,id=default -device ich9-intel-hda -device hda-output,audiodev=default -display none -device virtio-gpu -device virtio-keyboard-pci -device virtio-mouse-pci -device qemu-xhci,id=usb-bus -parallel none -chardev socket,id=char-serial,path=/Users/runner/.lima/docker-actions-toolkit/serial.sock,server=on,wait=off,logfile=/Users/runner/.lima/docker-actions-toolkit/serial.log -serial chardev:char-serial -chardev socket,id=char-serial-pci,path=/Users/runner/.lima/docker-actions-toolkit/serialp.sock,server=on,wait=off,logfile=/Users/runner/.lima/docker-actions-toolkit/serialp.log -device pci-serial,chardev=char-serial-pci -chardev socket,id=char-serial-virtio,path=/Users/runner/.lima/docker-actions-toolkit/serialv.sock,server=on,wait=off,logfile=/Users/runner/.lima/docker-actions-toolkit/serialv.log -device virtio-serial-pci,id=virtio-serial0,max_ports=1 -device virtconsole,chardev=char-serial-virtio,id=console0 -chardev socket,id=char-qmp,path=/Users/runner/.lima/docker-actions-toolkit/qmp.sock,server=on,wait=off -qmp chardev:char-qmp -name lima-docker-actions-toolkit -pidfile /Users/runner/.lima/docker-actions-toolkit/qemu.pid]","time":"2025-09-25T01:14:19Z"}
{"level":"info","msg":"Waiting for the essential requirement 1 of 4: "ssh"","time":"2025-09-25T01:14:19Z"}
{"level":"debug","msg":"executing script "ssh"","time":"2025-09-25T01:14:19Z"}
{"level":"debug","msg":"executing ssh for script "ssh": /usr/bin/ssh [ssh -F /dev/null -o IdentityFile="/Users/runner/.lima/_config/user" -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o NoHostAuthenticationForLocalhost=yes -o PreferredAuthentications=publickey -o Compression=no -o BatchMode=yes -o IdentitiesOnly=yes -o GSSAPIAuthentication=no -o Ciphers="^aes128-gcm@openssh.com,aes256-gcm@openssh.com" -o User=runner -o ControlMaster=auto -o ControlPath="/Users/runner/.lima/docker-actions-toolkit/ssh.sock" -o ControlPersist=yes -p 49216 127.0.0.1 -- /bin/bash -c "$(printf 'while read -r line; do [ -n "$line" ] \u0026\u0026 export "$line"; done\u003c\u003cEOF\n$(sudo cat /mnt/lima-cidata/param.env)\nEOF\n/bin/bash')"]","time":"2025-09-25T01:14:19Z"}
{"level":"debug","msg":"stdout="", stderr="ssh: connect to host 127.0.0.1 port 49216: Connection refused\r\n", err=failed to execute script "ssh": stdout="", stderr="ssh: connect to host 127.0.0.1 port 49216: Connection refused\r\n": exit status 255","time":"2025-09-25T01:14:19Z"}
{"level":"debug","msg":"qemu[stderr]: qemu-system-aarch64: Error: ret = HV_UNSUPPORTED (0xfae9400f, at ../target/arm/hvf/hvf.c:956)","time":"2025-09-25T01:14:19Z"}
{"level":"info","msg":"Driver stopped due to error: "signal: abort trap"","time":"2025-09-25T01:14:19Z"}
{"level":"info","msg":"Shutting down the host agent","time":"2025-09-25T01:14:19Z"}
{"level":"debug","msg":"shutting down the SSH master","time":"2025-09-25T01:14:19Z"}
{"level":"debug","msg":"executing ssh for exiting the master: /usr/bin/ssh [ssh -F /dev/null -o IdentityFile="/Users/runner/.lima/_config/user" -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o NoHostAuthenticationForLocalhost=yes -o PreferredAuthentications=publickey -o Compression=no -o BatchMode=yes -o IdentitiesOnly=yes -o GSSAPIAuthentication=no -o Ciphers="^aes128-gcm@openssh.com,aes256-gcm@openssh.com" -o User=runner -o ControlMaster=auto -o ControlPath="/Users/runner/.lima/docker-actions-toolkit/ssh.sock" -o ControlPersist=yes -O exit -p 49216 127.0.0.1]","time":"2025-09-25T01:14:19Z"}
{"error":"failed to execute ssh -O exit -p 49216 127.0.0.1, out="Control socket connect(/Users/runner/.lima/docker-actions-toolkit/ssh.sock): No such file or directory\r\n": exit status 255","level":"warning","msg":"failed to exit SSH master","time":"2025-09-25T01:14:19Z"}
{"level":"info","msg":"Shutting down QEMU with the power button","time":"2025-09-25T01:14:19Z"}
{"error":"dial unix /Users/runner/.lima/docker-actions-toolkit/qmp.sock: connect: connection refused","level":"warning","msg":"failed to open the QMP socket "/Users/runner/.lima/docker-actions-toolkit/qmp.sock", forcibly killing QEMU","time":"2025-09-25T01:14:19Z"}
{"level":"info","msg":"QEMU has already exited","time":"2025-09-25T01:14:19Z"}

/Users/runner/.lima/docker-actions-toolkit/ha.stdout.log:

{"time":"2025-09-25T01:14:19.808293Z","status":{"sshLocalPort":49216}}
{"time":"2025-09-25T01:14:19.877601Z","status":{"exiting":true}}

[crazy-max]

Per https://apple.stackexchange.com/a/473306/21181 macOS 15.0 supports nested virtualization. Does that mean that it should be possible to support Docker in GitHub macOS runners?

Yes it should work. I switched our ci to use macos-15-intel runners but VM start with lima start is really flaky: https://github.com/docker/actions-toolkit/actions/runs/19028456598/job/54336780790#step:10:394