⁠limactl built by ZeroBrew lacks ⁠com.apple.security.virtualization entitlement (breaks colima with ⁠--vm-type=vz)

Description

When installing lima (and using it via colima) from ZeroBrew on Apple Silicon macOS, starting a VM with the vz driver fails due to a missing Apple virtualization entitlement.

Colima fails with:

Error Domain=VZErrorDomain Code=2 Description="Invalid virtual machine configuration. 
The process doesn't have the "com.apple.security.virtualization" entitlement."

This prevents using Apple's Virtualization.framework backend (--vm-type=vz).

Environment

• macOS: Apple Silicon (M-series)
• Colima: installed via ZeroBrew
• Lima: installed via ZeroBrew
• Architecture: aarch64
• VM driver: vz
• Date: 2026-04-16

Binary path:

/opt/zerobrew/bin/limactl

Logs show:

/opt/zerobrew/share/lima/lima-guestagent.Linux-aarch64.gz

Steps to Reproduce

1. Install lima and colima via ZeroBrew
2. Run:

colima start --vm-type=vz

3. VM startup fails immediately

Full Error (ha.stderr.log)

Error Domain=VZErrorDomain Code=2 Description="Invalid virtual machine configuration. 
The process doesn't have the "com.apple.security.virtualization" entitlement."
UserInfo={
    NSLocalizedFailure = "Invalid virtual machine configuration.";
    NSLocalizedFailureReason = "The process doesn't have the "com.apple.security.virtualization" entitlement.";
}

This prevents:

• colima start --vm-type=vz
• Any Lima VM using the Apple Virtualization.framework backend

Users are forced to use qemu, which is slower and not the recommended backend on Apple Silicon.

Thank you for looking into this 🙏