Apple tries to contain itself with lightweight Linux VMs for macOS