Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Steve Ballmer

macrumors 6502
Oct 2, 2009
405
133
Redmond, WA
Hmmmm..... lemmmmeeeesssseeee here....

Since back to my earliest days of Mac'ing (late 80's), I've partitioned my drives so that the "System files" resided in their own partition.

I've ALWAYS kept my data on a separate volume (partition).
This made it fast and easy to backup my data, and if anything went wrong with the "system partition", the data partition was usually still fine.

And for years others told me what I was doing was unnecessary.

Well, well, well...!
Looks like Apple itself has finally come around to "my way of doing it".
That is -- segregate the OS files into their own "space".
Call it "a partition", or call it "a container", or call it whatever you like ("a rose by any other name...")
That's what they're doing.

Who had it right...?
Apple. Not you.
 

FarmerBob

macrumors 6502
Aug 15, 2004
313
105
Hmmmm..... lemmmmeeeesssseeee here....

Since back to my earliest days of Mac'ing (late 80's), I've partitioned my drives so that the "System files" resided in their own partition. . . .

Who had it right...?

"I've been doing it since then too." When parenthetically it was "illegal", "unsupported" and Apple would not talk to you if they knew the OS was ona partitioned drive. It was/is the only safe and logical way to keep your files safe and easy way to reinstall the OS when it hammers, and it will and does . . . About time they caught up. First Dark Modes and now "Auto-Partitioning". I can only imagine what 10.16 will have that we've been doing for decades.
 

haralds

macrumors 68030
Jan 3, 2014
2,990
1,252
Silicon Valley, CA
If MacOS has its own partition and read-only, many BSD or Unix programs might outright break and not work. Unless MacOS has some sort of virtual system folder that program can read/write, I am not sure about the compatibility here.
Based on this info, I am pretty sure Apple is now laying the foundation to ditch intel processor and much of the UNIX thing in the near future.
I have not checked into the details, but the folder hierarchy is likely handled through mount points to look as usual.
 

toru173

macrumors 6502
Apr 5, 2007
332
154
I have not checked into the details, but the folder hierarchy is likely handled through mount points to look as usual.
Looking at my unsuccessful boot attempt it symlinks everything back to root. I got a heap of "invalid current symlink" and "create_symlink" errors

Also, looking at the installer /Applications has moved to /System/Applications, and /Library is empty (though I can't see where it's gone just looking at the installer). This is probably why my system was unbootable. I used the OSInstall framework from 10.13 as per https://forums.macrumors.com/thread...ave-and-keep-hfs.2138162/page-3#post-27400317, but it doesn't know about ROSV so it didn't set up the root volume correctly. The installer has a flag called '__ROSV_CREATE_SYMLINKS' so I'll be playing with that.

Interestingly I also saw a references to 'APFS condenser' - maybe ROSV will give us a compressed system volume, so that macOS installs slim down by ~5GB!
 
Last edited:

Shirasaki

macrumors P6
May 16, 2015
16,263
11,764
"I've been doing it since then too." When parenthetically it was "illegal", "unsupported" and Apple would not talk to you if they knew the OS was ona partitioned drive. It was/is the only safe and logical way to keep your files safe and easy way to reinstall the OS when it hammers, and it will and does . . . About time they caught up. First Dark Modes and now "Auto-Partitioning". I can only imagine what 10.16 will have that we've been doing for decades.
Interesting enough, many windows users tend to separate their personal files, installed programs and system into three partitions back in windows xp. Every time I see this, I often tell them “just install all programs in C drive as you will need to install most of those programs anyway if you want to reinstall the system”.
 
  • Like
Reactions: Donut4000

toru173

macrumors 6502
Apr 5, 2007
332
154
So, things I've found:

- The contents of your 'Data' volume are pre-populated from the install location at /System/Library/Templates/Data
- Installing to one partition then manually copying the data from System/Library/Templates/Data to a volume does not result in a bootable system, at least if both are HFS+ and are seperate partitions rather than in the same APFS container

I'm currently testing two further things:
- Imaging a copy of the APFS container to a disk image, then restoring that image to a physical disk
- Using ditto or CCC to copy the individual volume contents from the image to newly created partitions

One other thing I've found is that there appears to be a new APFS 'role' type, of a "System" partition. I have't tried 'diskutil apfs changeVolumeRole' in Catalina, but in High Sierra the options are 0 for non, B for preboot, R for recovery and V for virtual memory. It recognises the system type but I cannot change the role to 'System'
 

Fishrrman

macrumors Penryn
Feb 20, 2009
29,242
13,316
"Can you still override Gatekeeper with right-click + open?"

The terminal command:
sudo spctl --master-disable

... still seems to over-ride Gatekeeper, and it adds the 3rd button (in the Privacy pref pane) to run apps from "anywhere".
 

madrag

macrumors 6502
Nov 2, 2007
375
98
If we can disable the read-only then I'm fine with that.

A separate partition for the OS is what I've been doing for the last two decades, so I'm ok with that also.

Can I still edit my System Directory if I so choose?
Every time I install MacOS I change the volume clicker back to the one to the true Mac OS X volume clicker.
Can you explain what is the volume clicker? and how do you do that?
 

!!!

macrumors 6502a
Aug 5, 2013
719
989
Tried to install the beta today in an APFS container. I guess it decided my Quota of 32GB wasn't valid, and just made its own new container with no Quota. I was annoyed enough at having an extra volume on my desktop wasting space for the beta, but two? No thanks.
 

lederermc

macrumors 6502a
Sep 30, 2014
897
756
Seattle
Interesting! I’ve just installed, so haven’t had a chance to poke around much. This explains the shift to APFS as it’s far easier to create and move volumes non-destructively
And two or more logical volumes can share free space on a physical device.
 

zorinlynx

macrumors G3
May 31, 2007
8,352
18,579
Florida, USA
I'm really curious what sort of linking mechanism is used to link, for example, /Users to /System/Volumes/Data/Users and so on. From the UNIX shell, /Users just looks like another directory. But when you cd into it, df . now tells you that you're in a different filesystem.

Various commands to examine files, like stat, file, ls -l, and so on don't provide any useful information. It looks like a frickin' directory. There's no bind or loopback mounts that I can see.

This is confusing, and as a 24 year UNIX veteran it's frustrating to not be able to see EXACTLY what's going on with my filesystem.
 
  • Like
Reactions: g-7 and atomic.flip

toru173

macrumors 6502
Apr 5, 2007
332
154
I'm really curious what sort of linking mechanism is used to link, for example, /Users to /System/Volumes/Data/Users and so on. From the UNIX shell, /Users just looks like another directory. But when you cd into it, df . now tells you that you're in a different filesystem.

Various commands to examine files, like stat, file, ls -l, and so on don't provide any useful information. It looks like a frickin' directory. There's no bind or loopback mounts that I can see.

This is confusing, and as a 24 year UNIX veteran it's frustrating to not be able to see EXACTLY what's going on with my filesystem.

I’m curious too. It’s as if it’s mounted back to /, but I can’t tell how. This explains why just copying the data to the ‘- Data’ partition doesn’t allow for a bootable system
 

Jasonstevens

macrumors regular
Oct 5, 2013
124
71
I think doing this has broken a bunch of apps that require the tmp folder.
Tunnelbrick doesn’t work on Catalina at the moment. It doesn’t even seem to be able to install properly.
 

toru173

macrumors 6502
Apr 5, 2007
332
154
I’ve just been able to successfully restore a disk image (captured in Mountain Lion) to a raw disk using High Sierra. So, whatever voodoo causes the data volume to be linked to the system volume is restorable.

I had to create an empty GPT entry for an APFS container, then use diskutility to restore container to container. I kept getting ‘cannot set UUID’ errors otherwise.

Edit: I’m back in the installer. Valid roles for APFS in Catalina are: 0, b, r, v, i, t, s, d, u, n, e, x, h, l, c, y, g (found from ‘diskutil apfs changeVolumeRole). I have to wait for this install to finish, but after that I want to check the man page for diskutil to see what the alphabet means. Diskutil apfs changeVolumeRole its dune?
 
Last edited:

blasto2236

macrumors 6502a
Nov 4, 2012
798
392
I wonder if this is why things broke when I tried to roll back to Mojave? I kept getting a 9000f error on my MBP after erasing and trying both regular and internet recovery. Made a bootable USB of Mojave and that failed too. It was bypassing the Mojave install and going to Internet recovery and failing with the same error.

Finally managed to get it to recovery but all I can do is reinstall Catalina. Trying that for the time being until I can properly roll back.
 

adrianlondon

macrumors 603
Nov 28, 2013
5,536
8,360
Switzerland
https://developer.apple.com/videos/play/wwdc2019/710/
This answers just about all the questions about the read-only system volume. This session video just went live some time today.
I've just watched the first few minutes. This new "Firmlink" sounds good. I've had issues with apps such as OneDrive where I've wanted to link a directory into its folder so it gets synchronised. Dropbox has no issues with symlinks but OneDrive refuses to follow them. Maybe this new firmlink will solve my issue.

For those who don't want to watch the video ... the system volume is writeable in this beta. In future, it will be read-only. SIP can still be disabled which makes the volume writeable but only until the next reboot. In other words, compared to Mojave, disabling SIP does not survive a reboot.
 

stiligFox

macrumors 68000
Apr 24, 2009
1,565
1,646
10.0.1.3
2EEDC0A7-5E62-48F7-996B-CEC33157B595.jpeg
I wonder if there’s a way around this. Trying to install the drivers for my MadCatz R.A.T. 7 mouse and it’s just failing, even when ran with SIP off and in Root user mode. Basically keeps saying the permission isn’t there to allow the kext to be installed, or ran even if I manually put the kext into System/Library/Extensions where it wants to go.

It’s frustrating!

Does anyone know if the main Library (not Users/~/Library, the main one) is covered by this read only stuff? Trying to figure out if I can force this thing to install...
 

redpandadev

macrumors 6502
Jun 3, 2014
353
318
View attachment 841498 I wonder if there’s a way around this. Trying to install the drivers for my MadCatz R.A.T. 7 mouse and it’s just failing, even when ran with SIP off and in Root user mode. Basically keeps saying the permission isn’t there to allow the kext to be installed, or ran even if I manually put the kext into System/Library/Extensions where it wants to go.

It’s frustrating!

Does anyone know if the main Library (not Users/~/Library, the main one) is covered by this read only stuff? Trying to figure out if I can force this thing to install...
If it behaves like Mojave, the correct install location for kexts is /Library/Extensions. Installing into /System has actually been deprecated always.
 

toru173

macrumors 6502
Apr 5, 2007
332
154
If it behaves like Mojave, the correct install location for kexts is /Library/Extensions. Installing into /System has actually been deprecated always.

I thought something looked odd. On that note, does Catalina still allow kexts at all, or are they specifically disallowed in favour of driverkit?
 

stiligFox

macrumors 68000
Apr 24, 2009
1,565
1,646
10.0.1.3
If it behaves like Mojave, the correct install location for kexts is /Library/Extensions. Installing into /System has actually been deprecated always.

That’s kind of what I figured...

Is there a way to recompile this thing so it installs in the proper places and has a newer unexpired certificate?
 

zorinlynx

macrumors G3
May 31, 2007
8,352
18,579
Florida, USA
  • Like
Reactions: Macintosh IIcx

redpandadev

macrumors 6502
Jun 3, 2014
353
318
That’s kind of what I figured...

Is there a way to recompile this thing so it installs in the proper places and has a newer unexpired certificate?
I have not investigated what kept support looks like yet. If it will work at all, you’ll definitely need to extract the files and install manually (you can do this with a tool called Pacifist, which has a free trial). You’ll probably need to load the kext manually and nearly definitely have to disable SIP.

Mid start with the man page for the ‘kextload’ tool on Catalina and see what it tells you, if it still exists.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.