@geekbb: NTFS read/write on Apple Silicon macOS — no kernel extensions, no SIP disable. It actually runs a libkrun microVM (based on anylinuxfs, with ntfs-3g inside) to handle the actual NTFS writes, then…
Summary
ntfsmac is an open-source tool that enables NTFS read/write on Apple Silicon macOS by using a libkrun microVM running ntfs-3g, avoiding kernel extensions and SIP modifications. It provides both CLI and a GUI menu-bar app.
View Cached Full Text
Cached at: 07/15/26, 10:00 PM
On Apple Silicon macOS, achieve NTFS read/write without kernel extensions, without disabling SIP. This actually runs a libkrun microVM (based on anylinuxfs, running ntfs-3g internally) to perform the actual NTFS writes, then macOS accesses it via NFS mount, bypassing the kernel extension route blocked by SIP policy. https://t.co/4vtdAhrtEs https://t.co/uMQIbP0ySg — # khr898/ntfsmac Source: https://github.com/khr898/ntfsmac # ntfsmac NTFS read/write on Apple Silicon macOS — no kernel extension, no SIP modification. Wraps anylinuxfs (https://github.com/nohajc/anylinuxfs) (a libkrun microVM running ntfs-3g), exported to macOS over NFS on a host-only vmnet bridge. CLI first, GUI second. ## Why macOS does not have native NTFS write support. The usual fixes are a kernel extension (blocked by newer SIP policy) or a paid third-party driver. ntfsmac takes a third path: a disposable Linux microVM does the actual NTFS write, and macOS just mounts it over NFS — no kext, no SIP toggle, no System Extension approval dance. ## Requirements - Apple Silicon (arm64) only. No Intel fallback. - macOS 13.0+. ## Install CLI, via Homebrew tap: sh brew tap khr898/ntfsmac brew install ntfsmac ntfsmac diagnose GUI: download the latest ad-hoc-signed .dmg from Releases — not distributed as a Homebrew cask (see Signing & distribution). ## Usage sh ntfsmac mount # e.g. disk4s1 — mounts read/write by default ntfsmac unmount ntfsmac diagnose # environment + bridge + helper health check ntfsmac uninstall # removes CLI, runtime state, and the GUI's privileged helper ntfsmac help Device identifiers are validated against ^disk[0-9]+s[0-9]+$ before any command touches them — see SECURITY.md. ## GUI Menu-bar app (no Dock icon): pick a drive, mount it, get out of the way. Menu-bar icon color tells the whole story — grey idle, blue mounting, green mounted read/write, yellow mounted read-only (dirty journal), red error. Full button-level spec in GUI-PLAN.md. ## Architecture macOS ── NFS (soft mount) ──> vmnet host-only bridge ──> libkrun microVM ── ntfs-3g ──> NTFS drive Every control that mounts, unmounts, or touches pf/route state goes through a SMJobBless XPC helper — the GUI never shell-outs to sudo directly. Full architecture and phased build plan: docs/dev/PLAN.md. ## Signing & distribution Ad-hoc signed only (codesign -s -) — no paid Apple Developer account, no notarization. That’s why the GUI ships as a DMG (never a Homebrew cask) and the CLI lives in a personal tap (never homebrew-core). ## Status CLI-first build, currently in the Phase 3 GUI build-out. See docs/dev/PLAN.md for the full phase plan. ## Contributing See CONTRIBUTING.md. Working with an AI coding agent? Start with CLAUDE.md (also readable as AGENTS.md). ## Security Please report vulnerabilities per SECURITY.md rather than filing a public issue. ## License MIT — see LICENSE.
Similar Articles
@alswl: Did you know the Linux kernel has a feature introduced in 1997 that allows Apple Silicon Macs to efficiently run x86 containers? It's called binfmt_misc, introduced in Linux 2.1.43, nearly 30 years ago. The principle is extremely simple: Linux...
This article introduces the binfmt_misc feature introduced in the Linux kernel in 1997. It allows registering rules to hand off binary execution to a specified interpreter. Today, combined with Rosetta on Apple Silicon Macs, it enables efficient x86 container operation, achieving performance close to 70-90% of native.
@sitinme: There's a pretty interesting open-source project called Cider, specifically designed to accelerate local AI inference on Macs with Apple Silicon chips. Many people buy a Mac mini or MacBook Pro and want to run models locally, but often encounter issues like insufficient speed and high memory usage. Actually...
Cider is an open-source project designed for Apple Silicon Macs, accelerating local AI inference by fully leveraging the computing power of M-series chips. It is compatible with the MLX ecosystem, supports models like Qwen and Llama, and is easy to install.
elfuse: Run Arm64/x86-64 Linux ELF binaries on macOS Apple Silicon
elfuse is a lightweight, process-scoped runtime that runs Linux ELF binaries natively on macOS Apple Silicon without Docker or full VMs, using Hypervisor.framework and optionally Rosetta for x86_64 translation.
@QingQ77: An open-source project written in Rust and C that uses JIT compilation to run Linux containers directly on macOS. https://github.com/ricccrd/dd It does not require a VM, hypervisor, or Linux kernel, but instead…
dd is an open-source tool written in Rust and C that runs Linux containers on macOS without a VM by using JIT compilation to translate container instructions and handle syscalls in userspace. It implements the Docker Engine API, supports arm64 and x86-64 Linux images, and offers performance comparable to or better than VM-based solutions.
@jaywcjlove: One-click enable full macOS AI on Chinese Mac - a kernel patch that spoofs the region to US version to unlock all AI features.
This article introduces a kernel extension called RegionSpoof (kext) that spoofs the region of Chinese Macs to the US version, unlocking full Apple Intelligence features, including on-device and cloud AI capabilities.