5 ms·

So this caused me to have to reinstall the OS yesterday. Glad to know what the issue was. And if anyone wants to know, I have to disable SIP because Apple won'

So this caused me to have to reinstall the OS yesterday. Glad to know what the issue was. And if anyone wants to know, I have to disable SIP because Apple won't let me use an eGPU on my Macbook with TB2.

mehrdadn 7y ago
Interesting, why can't you do that with SIP? (not a Mac user)
- saagarjha 7y ago
  Presumably the driver is not signed with a kext developer certificate, which means SIP must be disabled for macOS to load it.
- teamspirit 7y ago
  From what I understand, Apple removed the ability for TB2. In order to use an eGPU, some system files need to be patched [0]. 0. https://github.com/mayankk2308/purge-wrangler https://github.com/mayankk2308/purge-wrangler
  - dictum 7y ago
    Can't they be patched once, and then re-patched when system updates change make changes to system files?
    - month13 7y ago
      Could, it's just a hassle. I'm in a similar boat with a kext that enables unsupported Thunderbolt 3 docks.
      - dictum 7y ago
        Yep. I make some changes that SIP would catch, but I'm mostly comfortable with the boot into Recovery -> run a script -> boot back again. It's not kext stuff, though. I might have to use PurgeWrangler for an older iMac. Apparently, can keep it mostly enabled, but you need to mind updates and be ready to recover if your modifications are invalidated https://github.com/mayankk2308/purge-wrangler/issues/2#issuecomment-379283737 https://github.com/mayankk2308/purge-wrangler/issues/2#issue...
chmarr 7y ago
Have you tried going into System Preferences, Security, Advanced (I think it's "advanced", it's at the bottom right of the screen.) There you'll find a list of drivers, or something, that you can enable. I can't be more specific than that since my mac here is under IT control, and the feature is disabled.
- saagarjha 7y ago
  I believe those are the instructions for kernel extensions that are "approved" but distributed by third-parties.
  - stunt 7y ago
    Someone here suggested that you could do `csrutil enable --without kext` to load untrusted kernel extension without disabling SIP entirely.
- deleted 7y ago
  [deleted]
jen20 7y ago
Historically I've kept SIP disabled to be able to use Dtrace, which was neutered by it. Sure won't be installing any Google software though...
- stunt 7y ago
  As rgovostes already pointed out, you could use `csrutil enable --without dtrace` instead.
J5892 7y ago
I was in the same boat. I just happened to come across a years-old forum post mentioning the `/var` symlink right before I reinstalled the OS.

mehrdadn 7y ago

Interesting, why can't you do that with SIP? (not a Mac user)

saagarjha 7y ago
Presumably the driver is not signed with a kext developer certificate, which means SIP must be disabled for macOS to load it.
teamspirit 7y ago
From what I understand, Apple removed the ability for TB2. In order to use an eGPU, some system files need to be patched [0]. 0. https://github.com/mayankk2308/purge-wrangler https://github.com/mayankk2308/purge-wrangler
- dictum 7y ago
  Can't they be patched once, and then re-patched when system updates change make changes to system files?
  - month13 7y ago
    Could, it's just a hassle. I'm in a similar boat with a kext that enables unsupported Thunderbolt 3 docks.
    - dictum 7y ago
      Yep. I make some changes that SIP would catch, but I'm mostly comfortable with the boot into Recovery -> run a script -> boot back again. It's not kext stuff, though. I might have to use PurgeWrangler for an older iMac. Apparently, can keep it mostly enabled, but you need to mind updates and be ready to recover if your modifications are invalidated https://github.com/mayankk2308/purge-wrangler/issues/2#issuecomment-379283737 https://github.com/mayankk2308/purge-wrangler/issues/2#issue...

chmarr 7y ago

Have you tried going into System Preferences, Security, Advanced (I think it's "advanced", it's at the bottom right of the screen.) There you'll find a list of drivers, or something, that you can enable. I can't be more specific than that since my mac here is under IT control, and the feature is disabled.

saagarjha 7y ago
I believe those are the instructions for kernel extensions that are "approved" but distributed by third-parties.
- stunt 7y ago
  Someone here suggested that you could do `csrutil enable --without kext` to load untrusted kernel extension without disabling SIP entirely.
deleted 7y ago
[deleted]

jen20 7y ago

Historically I've kept SIP disabled to be able to use Dtrace, which was neutered by it. Sure won't be installing any Google software though...

stunt 7y ago
As rgovostes already pointed out, you could use `csrutil enable --without dtrace` instead.

J5892 7y ago

I was in the same boat. I just happened to come across a years-old forum post mentioning the `/var` symlink right before I reinstalled the OS.