@geekbb: 在 Apple Silicon 的 macOS 上实现 NTFS 读写，无需内核扩展、无需关闭 SIP。 这其实是运行了一个 libkrun 微型虚拟机（基于 anylinuxfs，内部跑 ntfs-3g）来完成真正的 NTFS 写入，再…

X AI KOLs Timeline 工具
ntfs macos apple-silicon filesystem open-source virtualization homebrew

摘要

ntfsmac is an open-source tool that enables NTFS read/write on Apple Silicon macOS by using a libkrun microVM running ntfs-3g, avoiding kernel extensions and SIP modifications. It provides both CLI and a GUI menu-bar app.

在 Apple Silicon 的 macOS 上实现 NTFS 读写，无需内核扩展、无需关闭 SIP。 这其实是运行了一个 libkrun 微型虚拟机（基于 anylinuxfs，内部跑 ntfs-3g）来完成真正的 NTFS 写入，再由 macOS 通过 NFS 挂载访问，绕开了被 SIP 策略挡住的内核扩展方案。 https://t.co/4vtdAhrtEs https://t.co/uMQIbP0ySg
查看原文
查看缓存全文

缓存时间: 2026/07/15 22:00

在 Apple Silicon 的 macOS 上实现 NTFS 读写，无需内核扩展、无需关闭 SIP。

这其实是运行了一个 libkrun 微型虚拟机（基于 anylinuxfs，内部跑 ntfs-3g）来完成真正的 NTFS 写入，再由 macOS 通过 NFS 挂载访问，绕开了被 SIP 策略挡住的内核扩展方案。

https://t.co/4vtdAhrtEs https://t.co/uMQIbP0ySg

khr898/ntfsmac

Source: https://github.com/khr898/ntfsmac

ntfsmac

NTFS read/write on Apple Silicon macOS — no kernel extension, no SIP modification.

Wraps anylinuxfs (a libkrun microVM running ntfs-3g), exported to macOS over NFS on a host-only vmnet bridge. CLI first, GUI second.

Why

macOS does not have native NTFS write support. The usual fixes are a kernel extension (blocked by newer SIP policy) or a paid third-party driver. ntfsmac takes a third path: a disposable Linux microVM does the actual NTFS write, and macOS just mounts it over NFS — no kext, no SIP toggle, no System Extension approval dance.

Requirements

  • Apple Silicon (arm64) only. No Intel fallback.
  • macOS 13.0+.

Install

CLI, via Homebrew tap:

brew tap khr898/ntfsmac
brew install ntfsmac
ntfsmac diagnose

GUI: download the latest ad-hoc-signed .dmg from Releases — not distributed as a Homebrew cask (see Signing & distribution).

Usage

ntfsmac mount <disk identifier>      # e.g. disk4s1 — mounts read/write by default
ntfsmac unmount <disk identifier>
ntfsmac diagnose                     # environment + bridge + helper health check
ntfsmac uninstall                    # removes CLI, runtime state, and the GUI's privileged helper
ntfsmac help

Device identifiers are validated against ^disk[0-9]+s[0-9]+$ before any command touches them — see SECURITY.md.

GUI

Menu-bar app (no Dock icon): pick a drive, mount it, get out of the way. Menu-bar icon color tells the whole story — grey idle, blue mounting, green mounted read/write, yellow mounted read-only (dirty journal), red error. Full button-level spec in GUI-PLAN.md.

ntfsmac popup screenshot 1 ntfsmac popup screenshot 2 ntfsmac popup screenshot 3

Architecture

macOS ── NFS (soft mount) ──> vmnet host-only bridge ──> libkrun microVM ── ntfs-3g ──> NTFS drive

Every control that mounts, unmounts, or touches pf/route state goes through a SMJobBless XPC helper — the GUI never shell-outs to sudo directly. Full architecture and phased build plan: docs/dev/PLAN.md.

Signing & distribution

Ad-hoc signed only (codesign -s -) — no paid Apple Developer account, no notarization. That’s why the GUI ships as a DMG (never a Homebrew cask) and the CLI lives in a personal tap (never homebrew-core).

Status

CLI-first build, currently in the Phase 3 GUI build-out. See docs/dev/PLAN.md for the full phase plan.

Contributing

See CONTRIBUTING.md. Working with an AI coding agent? Start with CLAUDE.md (also readable as AGENTS.md).

Security

Please report vulnerabilities per SECURITY.md rather than filing a public issue.

License

MIT — see LICENSE.

相似文章

@QingQ77: 一个用 Rust 和 C 编写的开源项目，通过 JIT 编译技术在 macOS 上直接运行 Linux 容器。 https://github.com/ricccrd/dd 它不需要虚拟机、hypervisor 或 Linux 内核，而是将…

X AI KOLs Timeline

dd is an open-source tool written in Rust and C that runs Linux containers on macOS without a VM by using JIT compilation to translate container instructions and handle syscalls in userspace. It implements the Docker Engine API, supports arm64 and x86-64 Linux images, and offers performance comparable to or better than VM-based solutions.