macOS Colima Sandbox // Zero Host Fingerprint

Swallow Host Fingerprints. Pass Only /workspace.

When you type claude on your Mac, Blackhole intercepts the launch. Hardware serials, region settings, and SSH keys are swallowed into the singularity — only your current folder slingshots across into an isolated Colima VM.

01. YOUR MAC HOST RAW ENV

Hardware UUID (ioreg) SWALLOWED

Region & Locale (zh_CN) SWALLOWED

~/.ssh & Cloud Keys SWALLOWED

Other Repos (~/Code/*) SWALLOWED

Direct ISP / IPv6 IP SWALLOWED

Current Dir ($PWD) SLINGSHOT

Pasted Image ($TMPDIR) SLINGSHOT

Hover any stream on the left · 5 swallowed into horizon · 2 lensed into VM

02. COLIMA VM CONTAINER CLAUDE'S VIEW

HOST FINGERPRINT 0 BYTES

Undetectable (--hostname blackhole)

PROJECT MOUNT VIRTIOFS 3.2 GB/S

/workspace (UID/GID matched rw)

CLIPBOARD BRIDGE READ-ONLY

$TMPDIR/*.png mirrored in 0.5s

NETWORK EGRESS FAIL-CLOSE

utun0 Verified · IPv6 Disabled

Red stream: Swallowed into Event Horizon (Never reaches Claude) Gold stream: Lensed across Horizon into Colima VM

$ git clone https://github.com/tommy0103/blackhole.git

01 // TELEMETRY

Same claude Command. Different Universe.

BLACKHOLE COLIMA VM · /workspace

virtiofs · clipboard mirror · no-new-privileges

02 // VELOCITY

Live Two-Way Sync Over virtiofs.

3.2 GB/s

Sequential Read

64 MB read in 20.1 ms across the VM boundary via Apple Virtualization virtiofs.

1.2 GB/s

Sequential Write (fsync)

Immediate bi-directional visibility between host editor and container tools.

0.03 ms

Per-File Metadata Stat

1,000 files traversed in 33.9 ms — full ripgrep and git status without lag.