Git Sagar
22daf7720c
The OSX-KVM ESP ships Lilu 1.6.8 / VirtualSMC 1.3.3 / WhateverGreen 1.6.7,
which disable themselves on macOS 26; Apple's SMC driver then runs on QEMU's
isa-applesmc stub and the restart path panics (SMCWDT smcWriteKey
kSMCBadCommand → nested panic after MACH Reboot). Overlay pinned current
releases (upstream.json opencore.kexts) and drop isa-applesmc: with the stub
present VirtualSMC steps aside ("multiple devices present"); alone it carries
the OSK and reboots work (PE restart test: 10 s, clean). RestrictEvents with
revpatch=memtab silences MacPro7,1's "Memory Modules Misconfigured".
- makeOpenCore: kext overlay + Kernel.Add entries for overlaid kexts,
--memory-mb (4 DIMMs), bootArgs default revpatch=memtab
- qemu.nix: deviceArgsFor { appleSmc } (default false); cli: --applesmc for
images built before this change
- vm-driver: reboot-death detection (reset 60 s after a guest reboot request
that never comes back), panics wait for XNU's own auto-reboot, debug dir
works across nixbld users
- generalize: QEMU USB keyboard declared ANSI (no Keyboard Setup Assistant)
- README: architecture, reliability handling, debugging
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XsESshRCoBoUVWV9qKURUF
85 lines
4.5 KiB
Nix
85 lines
4.5 KiB
Nix
# OpenCore EFI for the VM: OSX-KVM's proven ESP (OpenCore + Lilu/VirtualSMC/... kexts)
|
|
# with a config.plist rewritten for this image's SMBIOS identity.
|
|
# Output:
|
|
# $out/EFI/ BOOT/BOOTx64.efi + OC/ — copied into the image's ESP
|
|
# $out/boot.img raw GPT disk with that ESP, used to boot the installer
|
|
# $out/vmix.json model, serial, mlb, uuid, mac (also copied to EFI/vmix/)
|
|
# Serial + MLB come from macserial when not given (random per build); everything
|
|
# derived from `seed` (MAC, UUID) is deterministic so the NixOS module knows it.
|
|
{ pkgs, lib, upstream, macserial, qemu, ... }:
|
|
{ name ? "opencore",
|
|
model ? "MacPro7,1",
|
|
mac,
|
|
uuid,
|
|
serial ? null,
|
|
mlb ? null,
|
|
bootArgs ? "keepsyms=1 revpatch=memtab",
|
|
resolution ? "1024x768",
|
|
showPicker ? true,
|
|
pickerTimeout ? 2,
|
|
extraConfig ? {},
|
|
memSize ? 8192, # RAM described in SMBIOS (MacPro7,1 wants 4 DIMMs)
|
|
}:
|
|
let
|
|
ocImage = pkgs.fetchurl { inherit (upstream.opencore.image) url sha256; name = "OSX-KVM-OpenCore.qcow2"; };
|
|
# OSX-KVM's ESP ships Lilu 1.6.8 / VirtualSMC 1.3.3 / WhateverGreen 1.6.7, which
|
|
# disable themselves on macOS 26 ("unsupported operating system"); without
|
|
# VirtualSMC, macOS' restart path panics on QEMU's SMC stub. Overlay the
|
|
# current releases (upstream.opencore.kexts, pinned).
|
|
kextZips = lib.mapAttrsToList (n: k: { name = n; zip = pkgs.fetchurl { inherit (k) url hash; }; })
|
|
(upstream.opencore.kexts or {});
|
|
in
|
|
pkgs.runCommand "${name}-esp" {
|
|
nativeBuildInputs = with pkgs; [ _7zz python3 mtools dosfstools gptfdisk jq macserial ];
|
|
passthru = { inherit model mac uuid; };
|
|
} ''
|
|
echo "=== vmix: extracting OSX-KVM OpenCore ESP ==="
|
|
7zz x -y -oparts ${ocImage} 0.primary.img >/dev/null
|
|
7zz x -y -oesp parts/0.primary.img >/dev/null
|
|
[ -f esp/EFI/OC/config.plist ] || { echo "config.plist not found in OpenCore image"; exit 1; }
|
|
|
|
SERIAL="${toString serial}"; MLB="${toString mlb}"
|
|
if [ -z "$SERIAL" ] || [ -z "$MLB" ]; then
|
|
echo "=== vmix: generating serial/MLB for ${model} with macserial ==="
|
|
LINE=$(macserial --num 1 --model "${model}" 2>/dev/null | grep '|' | tail -1)
|
|
[ -n "$LINE" ] || { echo "macserial produced nothing for ${model}"; exit 1; }
|
|
[ -z "$SERIAL" ] && SERIAL=$(echo "$LINE" | awk -F' *\\| *' '{print $1}')
|
|
[ -z "$MLB" ] && MLB=$(echo "$LINE" | awk -F' *\\| *' '{print $2}')
|
|
fi
|
|
echo "model=${model} serial=$SERIAL mlb=$MLB uuid=${uuid} mac=${mac}"
|
|
|
|
mkdir -p $out/EFI/vmix
|
|
cp -r esp/EFI/BOOT esp/EFI/OC $out/EFI/
|
|
chmod -R u+w $out/EFI
|
|
${lib.concatMapStringsSep "\n" (k: ''
|
|
echo "=== vmix: updating ${k.name}.kext from ${k.zip.name} ==="
|
|
rm -rf kext-${k.name}; mkdir kext-${k.name}
|
|
${pkgs.unzip}/bin/unzip -q -o ${k.zip} -d kext-${k.name}
|
|
K=$(find kext-${k.name} -type d -name "${k.name}.kext" | head -1)
|
|
[ -n "$K" ] || { echo "${k.name}.kext not found in ${k.zip.name}"; exit 1; }
|
|
rm -rf "$out/EFI/OC/Kexts/${k.name}.kext"
|
|
cp -r "$K" "$out/EFI/OC/Kexts/${k.name}.kext"
|
|
grep -A1 CFBundleVersion "$out/EFI/OC/Kexts/${k.name}.kext/Contents/Info.plist" | tail -1
|
|
'') kextZips}
|
|
# hide OpenCore's own launcher from its picker (otherwise it is the default entry and loops)
|
|
echo -n Disabled > $out/EFI/BOOT/.contentVisibility
|
|
python3 ${./oc-config.py} --base esp/EFI/OC/config.plist --esp esp --out $out/EFI/OC/config.plist \
|
|
--model "${model}" --serial "$SERIAL" --mlb "$MLB" --uuid "${uuid}" --mac "${mac}" \
|
|
--nic-path "${qemu.nicDevicePath}" --boot-args "${bootArgs}" --resolution "${resolution}" \
|
|
--show-picker "${lib.boolToString showPicker}" --timeout ${toString pickerTimeout} \
|
|
--extra-json ${lib.escapeShellArg (builtins.toJSON extraConfig)} --memory-mb ${toString memSize} --add-kexts ${lib.concatStringsSep "," (map (k: k.name) kextZips)}
|
|
ocvalidate $out/EFI/OC/config.plist || echo "vmix: ocvalidate reported issues (OpenCore version may differ from validator), continuing"
|
|
|
|
jq -n --arg model "${model}" --arg serial "$SERIAL" --arg mlb "$MLB" --arg uuid "${uuid}" --arg mac "${mac}" \
|
|
'{model:$model, serial:$serial, mlb:$mlb, uuid:$uuid, mac:$mac}' > $out/vmix.json
|
|
cp $out/vmix.json $out/EFI/vmix/vmix.json
|
|
|
|
echo "=== vmix: building OpenCore boot disk ==="
|
|
# 64 MiB raw GPT disk, ESP from sector 2048 to the end (minus backup GPT)
|
|
truncate -s 64M $out/boot.img
|
|
sgdisk -n 1:2048:0 -t 1:EF00 -c 1:EFI $out/boot.img >/dev/null
|
|
SECTORS=$(( 64*1024*1024/512 - 2048 - 34 ))
|
|
mkfs.vfat -F 32 -n OPENCORE --offset 2048 $out/boot.img $(( SECTORS / 2 )) >/dev/null
|
|
mcopy -i $out/boot.img@@1M -s $out/EFI ::
|
|
mdir -i $out/boot.img@@1M ::EFI/OC >/dev/null
|
|
''
|