MakrSas/ios-topaz

选用指南

AI 根据 README 整理 · 2026/10/19 15:06:21

适用场景

适用于在Redmi Note 12 4G上实验性运行iOS 16，当前仅能启动至锁屏且无触摸支持。

查看 README 依据

As of **2026-10-18** the phone boots to the **iOS lock screen** in about 3 minutes, on the four Cortex-A73 cores. Rendering runs entirely on the CPU; there is no GPU driver. Touch is being brought up (see the roadmap); without it the lock screen cannot be unlocked yet. > Experimental bring-up, not a usable phone OS. Many things are missing or stubbed, and Apple's security model is mostly switched off. It installs into the `userdata` partition and so **erases Android's user data**. Nothing is flashed to the boot partitions; the kernel is started from RAM with `fastboot boot`. ## What works

使用方式

通过fastboot boot命令启动内核，使用GitHub Actions构建内核和iOS根文件系统。

查看 README 依据

You need a Redmi Note 12 4G (`topaz`/`tapas`, SM6225) with an **unlocked bootloader**, a Linux PC with `fastboot`, and a GitHub account for the kernel build. **Everything on `userdata` is lost.** Boot, vendor_boot, firmware and other partitions are never written. ### 1. Build the kernel The kernel builds on GitHub's macOS runners (macos-14, Xcode 15) with [blacktop/darwin-xnu-build](https://github.com/blacktop/darwin-xnu-build); newer Xcode's `iig` does not match the xnu-8796 IORPC ABI. Fork the repo and run, on the `topaz` branch: ```sh gh workflow run xnu.yml -R YOU/ios-topaz --ref topaz

Download the iPhone X (iPhone10,3) iOS 16.7.16 (20H392) IPSW from Apple. On Linux, with `apfs-fuse` (build it from [sgan81/apfs-fuse](https://github.com/sgan81/apfs-fuse) if your distribution has no package), `hfsprogs` and sudo: ```sh # OS, SystemOS and AppOS disk images (see BuildManifest.plist, D22AP Erase identity) sudo bash tools/mkiosroot.sh OS.dmg SystemOS.dmg AppOS.dmg ios16-root.img 16G sudo mount -t hfsplus -o loop,force ios16-root.img /mnt/iosroot sudo python3 tools/sweet-root-tweaks.py /mnt/iosroot sudo umount /mnt/iosroot img2simg ios16-root.img ios16-root.simg ```

fastboot -S 512M flash userdata ios16-root.simg # ~5 minutes; do not unplug fastboot boot shim/out/shim-boot.img ``` The shim screen (red) shows `MMFR0`, the Gold hand-off and `SPEED silver=… gold=…` for 8 seconds, then XNU starts. The first boot spends a while on the Apple logo (SpringBoard waits for LaunchServices to build its database); the lock screen follows after about 3 minutes. To get back to fastboot, hold Power + Volume down. ### Debugging tips

部署要求

需要Redmi Note 12 4G（解锁引导加载程序）、Linux PC和GitHub账户；构建iOS根文件系统需从Apple下载IPSW并安装apfs-fuse等工具。

查看 README 依据

You need a Redmi Note 12 4G (`topaz`/`tapas`, SM6225) with an **unlocked bootloader**, a Linux PC with `fastboot`, and a GitHub account for the kernel build. **Everything on `userdata` is lost.** Boot, vendor_boot, firmware and other partitions are never written. ### 1. Build the kernel The kernel builds on GitHub's macOS runners (macos-14, Xcode 15) with [blacktop/darwin-xnu-build](https://github.com/blacktop/darwin-xnu-build); newer Xcode's `iig` does not match the xnu-8796 IORPC ABI. Fork the repo and run, on the `topaz` branch: ```sh gh workflow run xnu.yml -R YOU/ios-topaz --ref topaz

Download the iPhone X (iPhone10,3) iOS 16.7.16 (20H392) IPSW from Apple. On Linux, with `apfs-fuse` (build it from [sgan81/apfs-fuse](https://github.com/sgan81/apfs-fuse) if your distribution has no package), `hfsprogs` and sudo: ```sh # OS, SystemOS and AppOS disk images (see BuildManifest.plist, D22AP Erase identity) sudo bash tools/mkiosroot.sh OS.dmg SystemOS.dmg AppOS.dmg ios16-root.img 16G sudo mount -t hfsplus -o loop,force ios16-root.img /mnt/iosroot sudo python3 tools/sweet-root-tweaks.py /mnt/iosroot sudo umount /mnt/iosroot img2simg ios16-root.img ios16-root.simg ```

已知限制

当前无触摸、Wi-Fi、蓝牙、蜂窝、音频、相机、传感器、GPS和SEP支持，无GPU，仅使用4个Gold核心，且安全性已关闭，安装会清除Android用户数据。

查看 README 依据

As of **2026-10-18** the phone boots to the **iOS lock screen** in about 3 minutes, on the four Cortex-A73 cores. Rendering runs entirely on the CPU; there is no GPU driver. Touch is being brought up (see the roadmap); without it the lock screen cannot be unlocked yet. > Experimental bring-up, not a usable phone OS. Many things are missing or stubbed, and Apple's security model is mostly switched off. It installs into the `userdata` partition and so **erases Android's user data**. Nothing is flashed to the boot partitions; the kernel is started from RAM with `fastboot boot`. ## What works

- **No Wi-Fi, Bluetooth, cellular, audio, camera, sensors, GPS, SEP.** `bluetoothd` and `fairplayd.H2` relaunch constantly because the hardware is missing. - **No GPU**, low frame rate (the CPU copies frames to the panel, `sweetfb_hz`). - **No real-time clock**: the date starts at 31 December. - **Only 4 of 8 cores** (see "Why only the Gold cores"). - **Security is off**: permissive AMFI and sandbox, stub AppleKeyStore, no data protection. ## How topaz differs from sweet These are the walls hit during the port; each one stops the boot silently if missed. | Problem | Fix | | --- | --- |