macOS

Overview

macOS is Apple's operating system for Mac computers. Pomerium publishes an official Darwin arm64 binary.

Developers can use the same route and policy model for private local and shared services without adding temporary authentication code.

macOS supplies the runtime or deployment environment. Pomerium runs in that environment and supplies the identity-aware access point for selected services.

Prerequisites

• A supported Linux host or Apple silicon Mac that can accept the user-facing route and reach the private upstream service.
• DNS, TLS, identity-provider configuration, protected secrets, and durable storage where the selected design requires it.

How it works

Run Pomerium Core on a supported Linux or macOS host in the environment. Install the official package, standalone binary, or container. Configure DNS, TLS, identity, route policy, storage, and replicas for the selected design.

Download the Darwin arm64 binary on an Apple silicon Mac. Supply a YAML configuration or environment variables, configure TLS, and set the upstream to a service that the Mac can reach. The team owns process supervision, secrets, and updates.

Check service health, DNS, TLS, required storage and replicas, and upstream reachability. Confirm that a direct public route cannot bypass Pomerium.

Example

A developer runs a private test application on a local container network. Pomerium Core runs on the same Mac and provides an authenticated TLS route for the test domain.

Considerations

• Pomerium 0.33 and later do not include an Intel macOS binary.
• Pomerium Desktop is a client for non-HTTP access and is not the Pomerium Core server described here.