OpenDMG
Berthly icon

Berthly for Mac

Native GUI for Apple's container tools with menu bar monitoring and drag-and-drop image building.

By henrywang. Free and open source.

Get it with OpenDMG View source on GitHub

Berthly at a glance

Version
1.4.1
Released
15 September 2026
Download size
27 MB
Works on
Apple silicon and Intel
Category
Developer Tools
Developer
henrywang
GitHub stars
41

About Berthly

A native macOS app for managing Apple's container - build images, run machines, and tail logs from a real GUI.

Screenshots

Berthly screenshot 1Berthly screenshot 2

How to install Berthly on a Mac

  1. Get OpenDMG. It is a free app store for open source Mac apps. Download OpenDMG.
  2. Search for Berthly and press Get. OpenDMG downloads version 1.4.1 from henrywang's own GitHub release.
  3. Open it. The download is checked against its SHA-256 fingerprint and its signature is checked on your Mac before it lands in Applications.

Updates to Berthly show up in OpenDMG and install with one button. No account is needed.

Prefer to do it by hand? The developer's file is on GitHub: Berthly-1.4.1.dmg (27 MB).

What is new in Berthly 1.4.1

## What's Changed

Berthly now builds against **apple/container 1.4.1 / containerization 0.45.0** (up from 1.3.1 / 0.42.0).

### Security

containerization 0.45.0 fixes a moderate-severity advisory,
**[GHSA-4587-w9mm-xxvh](https://github.com/apple/containerization/security/advisories/GHSA-4587-w9mm-xxvh)**:
OCI image `load` followed a symlink named `oci-layout` or `index.json` inside
the archive to anywhere on the filesystem, so a crafted archive could pull
image metadata from outside the extraction directory — reachable through
Berthly's **Load OCI tar** sheet.

**This matters for how you get the fix.** Image extraction runs inside
`container-apiserver`, not inside Berthly itself — updating Berthly to 1.4.1
patches Berthly's own build, but a daemon still on 1.3.1 or earlier is still
running the vulnerable extraction code. **You need `container` itself on
1.4.1** for the fix to actually apply. Berthly's version gate (below) makes
sure you can't miss that.

(A second advisory, GHSA-rgqp-277h-gcwj — a Unix-socket path buffer overflow
— is also fixed in 0.45.0 but isn't reachable through anything Berthly does;
noted for completeness.)

### Version gate is now stricter

`container` installs on 1.2.x or 1.3.x now hit a **blocking** "update
required" gate instead of running as-is — a deliberate change, not a
regression. Two things made this the right call:
…

More Developer Tools apps

All Developer Tools apps