search

LnL7 / nix-darwin

nix modules for darwin
MIT License
2.73k stars 423 forks source link

[Feature Request] macFUSE module #668

Open 2gn opened 1 year ago

2gn commented 1 year ago

I'd like it to have an option to enable macFUSE ( FUSE filesystem for MacOS ).

andrewcrook commented 1 year ago

I'd like it to have an option to enable macFUSE ( FUSE filesystem for MacOS ).

Correct me if I am wrong, but don't you have to reboot into recovery mode and disable SIP by using csrutil to install it? If it does you cannot automate this process. I know it did when I used it for NTFS read/write support.

2gn commented 1 year ago

It seems it doesn't.

macFUSE does not require you to disable Gatekeeper or System Integrity Protection. All official macFUSE releases are digitally signed and approved by Apple's Notary Service. This means macFUSE is compatible with Gatekeeper and System Integrity Protection.

Latest macFUSE installs kernel extension to bridge user space and the filesystem.

ChatGPT told me that it used to require SIP to be disabled.

As of my knowledge cutoff in September 2021, disabling System Integrity Protection (SIP) was a common requirement for installing macFUSE on macOS. However, it's important to note that macOS updates and changes to the software may have altered this requirement. Therefore, I recommend consulting the official documentation and resources for macFUSE or checking with the developer or community support to confirm the current status and any specific installation instructions regarding SIP.

Is it automatable to install kernel extensions though?

andrewcrook commented 1 year ago

Okay, but you still need to change settings in recovery mode to allow third-party extensions , as you have noticed and the process may be different on older versions of macOS.

Only way it might be possible to automated this is by using a profile under configurator and/or MDM tools these tend to be geared towards businesses and business IT management solutions. But yes you can make and install them (does require user input for security)

However, profiles are not something you want to be downloading and installing off the net for obvious reasons e.g they can mess-up your Macs settings and can be a security risk.

I am not sure if there is a nice way to do this.....