← Back to context

Comment by LoganDark

4 hours ago

Apple has gone through tremendous effort to enable alternative operating systems on Apple Silicon Macs: https://asahilinux.org/docs/platform/open-os-interop/

Are you sure you linked the right page? This looks like a list of workarounds the Asahi team had to figure out.

  • Oh, my bad, I think the one I intended was this one: https://asahilinux.org/docs/platform/security/#apples-unspok...

    > Rumours circulating that Apple are actively hostile towards efforts such as Asahi, or that their security must be bypassed or jailbroken to run untrusted code are unfounded and false. In fact, Apple have expended effort and time on improving their security tooling in ways that only improve the execution of non-macOS binaries. An example of this is giving their Boot Policy configuration tool the ability to wrap raw AArch64 code in a proper Mach-O format starting with macOS 12.1. This is only ever required for enrolling a boot object that is not already a macOS kernelcache.

> tremendous efforts

Tremendous efforts would be to publish reference manuals for all their hardware components.

Apple is doing the bare minimum, which is to not build 10km tall walls around its walled garden.

But in the modern day of walled gardens, that's viewed as generosity.

  • This is Apple we're talking about. What may be the bare minimum for you was a lot of work for them. Work they could have passed up and we would've all had to simply deal with it. They do that all the time, and there's nothing we can do about it. But here they didn't. Here they did "the bare minimum" to allow custom operating systems on their newer hardware. That should be commended. Yes, we should celebrate that hardware we purchase and own still allows us to run code we wrote. Because the alternative is that it could not. Their non-macOS devices already don't.

    To be perfectly clear, Apple is like a lifeline to a lot of people. They are one of the last bastions of quality in the hardware and software world. This is why it's such a disappointment that they've been faltering lately: we had high expectations of them, which hasn't been quite so true for the rest of the industry for a while. So it is a big deal that hidden gems like this continue to crop up from them: it is a sign that some of their core values still remain. And I really hope the new CEO will bring back some of what they lost after Steve Jobs.

Most of those accommodations are for macOS, and make very few (if any) concessions for alternative operating systems. We're talking Qualcomm-tier effort.

Intel and AMD set the standard for "tremendous effort" bringing up support for alternative OSes. Nvidia follows behind, and Apple's support is (somehow) behind Nvidia's foot-dragging.

  • This is true, although Apple could of just as easily prevented alternative OSes as a whole if they wanted to.

    • They already have the ability to prevent alternative operating systems. They use the same or similar SoCs in their other product lines and those do not let you do this.

      Yes, Apple put effort into making it possible to install alternative operating systems on Macs, but that is an exception to the design because the chips are designed to be locked down. I expect Apple to remove the option at some point because nobody is using it on any of the recent hardware.

  • I see a lot of dual-purpose here. Maybe you don't, or maybe you figure it's just a coincidence that Linux can also benefit from this. Apple definitely had it in mind, and designed for it, even if they don't release documentation.

Absolutely not. They put in the literal bare minimum possible effort short of locking down the platform entirely.

You get a jmp to some arm64 instructions of your choosing, with a bunch of CPU features locked out.

  • I will admit I am a bit confused by them locking out features like that, especially since they didn't at first. I wouldn't jump to assuming it's hostile, though.