It mentions it in part 3. You must have missed post #8,198.
ocvalidate
- before making my claim! And I've just run it again and also searched through §3 by eye, and I'm still not seeing it - what should I be looking at?ocvalidate
mightn't be able to better replace some uses of plutil
now, which I will pm to you.I seem to recall @tsialex saying previously that some USB sticks don’t support booting. Perhaps try a different USB stick.Thanks tsialex.
In preparation for possibly going back down to Catalina, I've decided to move Opencore as tsialex suggested to a USB.
I gave it a trial today and in preparation for that did the following:
-Copied Opencore files to my bootable USB
-Disabled Opencore on my "Disk A" with Big Sur.
-I removed Disk A from the bay and then followed the guides instructions to bless the bootable USB using the 1st boot process.
After this however, my Mac wouldn't boot. It would chime and then after about 30 secs switch off. I tried following the recovery process (NVRAM reset etc) in the guide and eventually got back to my Mojave login screen.
I tried a further two times to bless the USB using the guide instructions but with the same outcome.
I reinstalled my Disk A with Opencore/Big Sur and followed the guide to:
1. Re-enable opencore
2. Follow the 1st boot process
My system is back to normal and I'm typing this on Big Sur again.
I've tried searching the forum and also googling to troubleshoot blessing a USB but to no avail. I'm currently creating a new install media bootable USB in case it was an issue there. I saw on one post online that I may need to disable SIP in order for the bless to work properly but would appreciate advice from anyone who's been through the process.
I am using all the time 87F which includes 0x800 and I can update BS. Which update is prevented?CSR_ALLOW_UNAUTHENTICATED_ROOT (0x800) is not practical as it prevents incremental (non-full) OTA updates.
<key>ACPI</key>
<dict>
..........................
<key>Patch</key>
<array>
<dict>
<key>Base</key>
<string></string>
<key>BaseSkip</key>
<integer>0</integer>
<key>Comment</key>
<string>Replace one byte sequence with another</string>
<key>Count</key>
<integer>0</integer>
<key>Enabled</key>
<false/>
<key>Find</key>
<data>ESIzRA==</data>
<key>Limit</key>
<integer>0</integer>
<key>Mask</key>
<data></data>
<key>OemTableId</key>
<data></data>
<key>Replace</key>
<data>RDMiEQ==</data>
<key>ReplaceMask</key>
<data></data>
<key>Skip</key>
<integer>0</integer>
<key>TableLength</key>
<integer>0</integer>
<key>TableSignature</key>
<data></data>
</dict>
<dict>
<key>Base</key>
<string>\_SB.PCI0.LPCB.HPET</string>
<key>BaseSkip</key>
<integer>0</integer>
<key>Comment</key>
<string>HPET _CRS to XCRS</string>
<key>Count</key>
<integer>1</integer>
<key>Enabled</key>
<false/>
<key>Find</key>
<data>X0NSUw==</data>
<key>Limit</key>
<integer>0</integer>
<key>Mask</key>
<data></data>
<key>OemTableId</key>
<data></data>
<key>Replace</key>
<data>WENSUw==</data>
<key>ReplaceMask</key>
<data></data>
<key>Skip</key>
<integer>0</integer>
<key>TableLength</key>
<integer>0</integer>
<key>TableSignature</key>
<data></data>
</dict>
</array>
That sample is a general example.Trying to understand the OC config.plist I compiled a fresh copy of OC, which contains a sample plist.
Thanks for this. The one I compiled is 0.7 as it was downloaded/built today. Is the sample you pointed me to still valid?That sample is a general example.
If you want to make your own config, it's much easier to build it from the sample included here. This sample is a safe, minimal working solution for the Mac Pro 5,1.
Thanks for this. The one I compiled is 0.7 as it was downloaded/built today. Is the sample you pointed me to still valid?
ocvalidate
on it (which is included with the OC download in Utilities), then it will warn you of any settings added to OC very recently. If there are any, then it is usually safe to add them by using the settings (just for those particular missing values) from the sample plist that comes with OC.I am getting OTA and incremental updates with 87F which is the Apple default SIP+authenticated-root in latest BS. When BS came out originally it was 877, but then it changed to 87F.@startergo - thanks -![]()
Correct values to use for disable SIP · Issue #1657 · acidanthera/bugtracker
I've got this comment from @startergo on Macrumors: Bmju said: CSR_ALLOW_UNAUTHENTICATED_ROOT (0x800) is not practical as it prevents incremental (non-full) OTA updates. I am using all the time...github.com
Please do confirm as requested: if you are getting OTA updates and especially incremental OTA updates then something is up and (I think) needs addressing. Thanks for your input.
The sample in the guide will be updated when 0.7.0 is released on the 7th.Thanks for this. The one I compiled is 0.7 as it was downloaded/built today. Is the sample you pointed me to still valid?
I am getting OTA and incremental updates with 87F which is the Apple default SIP+authenticated-root in latest BS. When BS came out originally it was 877, but then it changed to 87F.
Thanks. No harm in waiting anyway. I also noticed that the built I did has a bootstrap.efi file in EFI/OC/Bootstrap (EFI/OC/Bootstrap/Bootstrap.efi)The sample in the guide will be updated when 0.7.0 is released on the 7th.
Exactly, that is why you need to run plutil first. BTW, I also use xattr to clean files with extended attributes.Also, FWIW,ocvalidate
does also validate the formatting - it won't normalize it, as theplutil
step would, but it won't process the file, and will complain, if it is not valid.
As described into ocvalidate, you can only validate configs generated for same OC version. Since you are running 0.7.0, it will report errors on 0.6.9 config file. But you can easily look at the manual and add/update the old config keys/values, if you want.Is the sample you pointed me to still valid?
You're forgetting "sudo":When I enter "diskutil mount /dev/disk0s1" (my EFI partition), I get the message "Volume on disk0s1 failed to mount. Perhaps the operation is not appropriate (kDAReturnNotPermitted)".
sudo diskutil mount /dev/disk0s1
Version 0.6.8, for example, brought some nice changes. Have a look at the official release notes.I believe I'm currently on OC 0.5.9 (I installed it last summer). Would there be much benefit to updating to the last version?
Not necessarily. But it's definitely a good idea to update everything. Don't forget OcBinaryData.If I upgrade OC, would it require new versions of all the supplementary files (whatevergreen etc.)? I assume so.
Once macOS is booted, OC is out of the way. However, the beneficial changes applied by OC remain.Does OpenCore have any effect on macOS once booted?
Actually, many improvements were developed specifically for minimally spoofed Macs such as the Mac Pro 5,1.I presume most of the improvements to OC are for platforms other than the MP 5,1?
TL/DR:
So @startergo I've closed the OC issue for now - if yourself or anyone else can provide screenshots similar to those I've just generated showing something other than the behaviour above, and as currently documented in the OC docs, I will happily examine.
- SIP bit 0x10 (present in 0x7F, 0x77, 0x87F etc., but not in 0x6F, 0x26F etc.) blocks OTA updates, period. (I have just replicated this.)
- SIP bit 0x800 apparently blocks incremental OTA updates. (I would tend to trust this until proven otherwise.)