macOS FileVault oba Time Machine Sparsebundle Eyonooneddwa: Okuddaabiriza Superblock Container ya APFS, Okuteeka ebifaananyi mu kitundu, n'okusumulula Terminal y'ekisumuluzo eky'okuzzaawo¶
Ennamba z’embeera ez’amangu zaawukana okusinziira ku nsi. Omuko guno gukozesa 911, ennamba ya Amerika ne Canada. Ensi endala nnyingi zikozesa 112, 999 oba ennamba endala. Funa ennamba y'ensi yo.
Okulaba MacBook Pro, MacBook Air, Mac Studio, oba iMac nga egaana okutandika ne folda y'akabonero k'ebibuuzo eyaka, akabonero akalaga nti akawera enzirugavu n'okusalasala (support.apple.com/mac/startup), screen y'okuyingira egaana password yo emanyiddwa oluvannyuma lw'okugwa kwa macOS update, oba Disk Utility reporting Error: -69845: File system verify or repair failed / Invalid APFS superblock / Object map is invalid kizibu kya maanyi mu kutereka macOS. Ekisinga obubi, bw’ossaamu backup drive yo eya NAS oba USB Time Machine ey’ebweru okuzzaawo fayiro zo, macOS etera okuvaayo ensobi eyookubiri embi: Time Machine completed a verification of your backups. To improve reliability, Time Machine must create a new backup for you (okusiba ebweru wo... .sparsebundle). Tonyiga Erase Mac oba okuleka Time Machine okuwandiika ku byafaayo byo eby'okutereka. Kubanga Enkola ya Fayiro ya Apple (APFS) ye Kopi-ku-Wandiika (CoW) enkola ya fayiro ey'okutunda ekuuma superblocks za konteyina ez'ebyafaayo (nx_superblock_t) n’ebifaananyi eby’omu kitundu ebisomebwa byokka ku disiki yennyini, kumpi bulijjo osobola okusumulula FileVault n’ossaako ekifo ekikadde eky’okukebera eby’okutunda obulamu okuva ku macOS Recovery Terminal. Singa Mac yo efuna hardware kernel panic loop oba black screen okusinga ensobi ya APFS volume, laba macOS kernel panic, screen enzirugavu, n'okudda engulu; ku kuggalawo okusiba okusalako emikutu (BitLocker, . FileVault, . LUKS), laba BitLocker, FileVault, ne LUKS okuzzaawo ensirifu okuggalawo ekisumuluzo n'okuddamu okutereeza TPM era rm -rf mu butanwa oba Shift-Delete ku ext4, XFS, APFS, ne NTFS: okuddamu okuteekebwa mu kusoma kwokka. Singa okuggala kuno ku bifo by’emirimu kukosa obujjanjabi bw’eddwaliro, okusindika mu bwangu, oba okulongoosebwa okukuuma obulamu, kuba ku nnamba y’amangu mu kitundu kyo (911 mu Amerika ne Canada, . 112 okwetoloola omukago gwa Bulaaya, . 999 mu Bungereza) oba kebera ku dayirekita yaffe eya ennamba z’amangu.
Kino kikole kati¶
- TONYINA "Erase Mac," "Erase Volume Group," oba "Start New Backup" mu Time Machine: Ne bwe kiba nti bbaatuuni ya Disk Utility eya First Aid eremereddwa ne
File system verify or repair failed (-69845)obafsck_apfsafuluma ne koodi8, fayiro zo ez'omukozesa ezikuumibwa munda ** .Macintosh HD - Data** (oba Ekyuma kyo eky'Ekiseera.sparsebundlebands) zikyali mu mubiri nga tezifudde ku SSD. - Boot mu
macOS Recovery(Utilities -> Terminal) amangu ago okuyimiriza backgroundTRIMne Copy-on-Write okukyusakyusa ekifo ky'okukebera: - Ku Apple Silicon Macs (
M1, .M2, .M3, .M4): Ggala ddala Mac, olwo onyige n'okwata Power (Touch ID) button okumala sekondi 10 okutuusa nga screen egamba nti * .Loading startup options...*. Nywa ku Ebyokulonda -> Weeyongere. - Ku Intel Macs: Ggyako Mac era amangu ago onywerere
Command (⌘) + R(obaOption + Command + Rfor Internet Recovery) okutuusa ng’akabonero ka Apple oba spinning globe efulumye. - Singa graphical Recovery Assistant ekwatiddwa nga ekusaba okulonda administrator user nga password ye gy’agaana okukkiriza, tonyiga
Erase Macmu waggulu ku kkonoRecovery Assistantmenu. Mu kifo ky'ekyo, noonya "Weerabidde ebigambo byonna eby'okuyingira?" (ekiggulawo Ekisumuluzo ky'Okuzzaawo Omuntu eky'ennukuta 24 oba iCloud Apple ID okusumulula ekiragiro) oba kozesa...Utilitiesmenu okutongoza Terminal. - Sumulula
FileVault 2mu ngalo okuva ku Recovery Terminal (diskutil apfs unlockVolume) nga tonnaba kugezaako kussaako kwonna oba kukoppa fayiro: Voliyumu ya APFS bw’eba esirikiddwa ne FileVault, .Macintosh HD - Dataasigala nga talabika (Locked: Yes) okutuusa lw’ogisumulula. Mu Recovery Terminal, ddukadiskutil apfs listokuzuula node y'ekyuma kya Data volume yo (mu ngeri entuufudisk3s5ku Apple Silicon obadisk2s1ku Intel) n’okuddukadiskutil apfs unlockVolume /dev/disk3s5(nga olina ekigambo kyo eky'okuyingira) obadiskutil apfs unlockVolume /dev/disk3s5 -recoverykeychain/ .-passphrase <24-CHAR-RECOVERY-KEY>. - Singa
Macintosh HD - Dataasumulula (Unlocked: Yes) naye eremererwa okulinnya read-write olw'omuti gwa B oba Object Map ogwonooneddwa (omap), giteeke mu ngeri enkakali READ-ONLY (mount_apfs -o rdonly) oba okulinnya ekikaddeAPFS Local Snapshot(mount_apfs -s): Bw'oyitawo-o rdonly(oba ssaako ekifaananyi ky'ekitundu ekya Time Machine buli ssaawa nga tekinnagwa ekiterekeddwa ku SSD ey'omunda okuyita mumount_apfs -s), APFS kernel driver abuuka write-journal replay era ekusobozesa okukoppa ebitundu 100 ku buli 100 ebya/Users/yournameku USB drive ey’ebweru nga oyita mursyncobacp -R. - Toddukangako
fsck_apfs -yenfunda eziwera ku SSD eremereddwa nga tonnaba kusengula fayiro zo ezisomebwa zokka: Singa APFS Object Map (omap_phys_t) oba Extent Reference Tree eyonoonese, ekiwaliriza okuddaabiriza okusoma-okuwandiika nefsck_apfs -yasobola okusumulula maapu y'ebitundu bya dayirekita ebyonooneddwa. Bulijjo gezaakomount_apfs -o rdonlyn’okukoppa/Users/ku drive ey'ebweru esooka, era edduke yokkafsck_apfsoluvannyuma lw’ekyo. - Ku kyuma ky'Ekiseera ekyonoonese
.sparsebundle(Backup Verification Failed), okulongoosacom.apple.backupd.ModelIDokusiba bendera muInfo.plist, ssaako sparsebundle nehdiutil attach -nomount -readwrite, n’okuddaabiriza obuzito bwa APFS/HFS+ obw’omunda nefsck_apfsobafsck_hfs: Kumpi bulijjo osobola okununula byombi ebyafaayo bya backup ne live sparsebundle nga totandise buto.
Danger
Lwaki tolina NEVER reset NVRAM oba okuggya Mac ku iCloud Find My singa ekisumuluzo kyo ekya FileVault kikuumibwa mu iCloud (institutional oba iCloud recovery) nga tosoose kukebera Personal Recovery Key yo ey’ennukuta 24: Ku Macs ezirina Apple T2 Chip y’ebyokwerinda oba Apple Silicon (M1/M2/M3/M4), omufuzi wa SSD wa hardware akuuma buli lupapula lwa NAND nga luwummudde ng’akozesa ekisumuluzo kya hardware ekyetongodde munda mu Secure Enclave (SEP), ezingiddwa n'ekisumuluzo kyo eky'okusiba obuzito bwa FileVault (VEK). Waliwo zero backdoor okuyita ku Secure Enclave encryption singa byonna cryptographic ebisumuluzo wrappers (KEKs - Password y'omukozesa, Ekisumuluzo ky'okuzzaawo omuntu, Okuzzaawo iCloud, oba Ekisumuluzo ky'Ekitongole kya MDM) bisaanyizibwawo.
Omuti gw'okusalawo: Mac etasobola kutandika, FileVault esibiddwa, oba okulonda Time Machine eyonoonese¶
Kozesa flowchart eno mu macOS Recovery (Utilities -> Terminal) okulonda ekkubo ettuufu ery’okudda engulu eritali lya kuzikiriza:
flowchart TD
Start["Eby'amangu: Mac Unbootable, FileVault Egaana Password, oba Ekyuma ky'Ekiseera Ekyonoonese"] --> WhichIssue{"Kizibu Ki Kyolekedde?"}
WhichIssue -->|"1. Internal Mac SSD Unbootable (? Folda / Akabonero akakugira / Ensobi mu bujjanjabi obusookerwako -69845)"| BootRec["Boot mu macOS Okuzzaawo -> Ggulawo Ebikozesebwa -> Terminal -> Duka: diskutil apfs list"]
WhichIssue -->|"2. FileVault Okugaana Password y'Omukozesa Amanyiddwa oba Okusaba Ekisumuluzo ky'Okuzzaawo"| FVFix["Mu Recovery Assistant: Nywa ku 'Weerabidde password zonna?' OBA Kozesa diskutil apfs listcryptousers mu Terminal"]
WhichIssue -->|"3. Time Machine Kigamba: Backup Eyonoonese / Elina Okukola Backup Empya"| TMFix["Teeka Omukutu/USB Drive -> Kebera .sparsebundle/Info.plist -> hdiutil ssaako -tewali -> fsck_apfs / fsck_hfs"]
BootRec --> ContainerOk{"Olukalala lwa diskutil apfs lulaga APFS Container & Volumes (Macintosh HD - Data)?"}
ContainerOk -->|"Nedda: Konteyina ya APFS Ebuze oba 'Superblock ya APFS etali ntuufu'."| SuperblockRec["Sikaani Eddako APFS Container Checkpoint Superblocks (nx_superblock_t) & Teeka Read-Yokka ng'oyita mu fsck_apfs -n / apfs-fuse"]
ContainerOk -->|"Yee: Volumes eziwandiikiddwa (e.g. disk3s5) ."| UnlockStep["Sumulula FileVault awatali Kussa: diskutil apfs okusumululaVolume /dev/disk3s5 -nomount"]
UnlockStep --> TryRO["Gezaako Okussa okusoma kwokka: mkdir /Volumes/Okununula && mount_apfs -o rdonly /dev/disk3s5 /Volumes/Okununula"]
TryRO --> DidMount{"/Volumes/Rescue Yalinnya Mu Buyonjo?"}
DidMount -->|"Yee"| CopyData["Plug in ExFAT/APFS External USB Drive -> Koppa /Volumes/Rescue/Users/<gwe> Amangu ago ne ditto oba rsync"]
DidMount -->|"Nedda: mount_apfs Ezzaayo Ensonga Enkyamu / Ensobi mu Kuyingiza-Okufulumya"| SnapMount["Olukalala Ebifaananyi eby'omunda ebya APFS (diskutil apfs listSnapshots) -> Teeka Ebifaananyi eby'okusooka nga tekunnagwa ng'oyita mu mount_apfs -s"]
FVFix --> UnlockStep
Omutendera 1: Okutegeera APFS Container, Volume Group, ne FileVault Key Hierarchy¶
Nga tonnawandiika biragiro mu macOS Recovery Terminal, tegeera engeri macOS ey’omulembe (Catalina 10.15 okuyita mu Monterey, . Ventura, . Sonoma, era Sequoia) eraga SSD ey'omunda era lwaki ** .Macintosh HD** SI ye fayiro zo we zibeera.
+-------------------------------------------------------------------------+
| MODERN macOS APFS CONTAINER & FILEVAULT ARCHITECTURE |
| |
| Physical Apple SSD (/dev/disk0) |
| +-- Partition 1: Apple_APFS_ISC (iBoot System Container - Apple Sil.) |
| +-- Partition 2: Apple_APFS (Main Container -> Synthesized /dev/disk3) |
| | |
| +-- [nx_superblock_t] Container Superblock & Checkpoint Ring |
| +-- [omap_phys_t] Container Object Map (Virtual -> Physical Block)|
| | |
| +-- Volume 1 (disk3s1): "Macintosh HD" (Signed System Volume SSV) |
| | -> Strictly Read-Only OS files. Contains 0 user documents. |
| +-- Volume 2 (disk3s5): "Macintosh HD - Data" (FileVault Locked) |
| | -> YOUR ACTUAL DATA (/Users, /Applications, /Library, /var) |
| +-- Volume 3 (disk3s2): "Preboot" (FileVault Login Users & Wi-Fi) |
| +-- Volume 4 (disk3s3): "Recovery" (macOS Recovery OS) |
| +-- Volume 5 (disk3s4): "VM" (Swapfile & Sleepimage) |
+-------------------------------------------------------------------------+
Ensonga ssatu enkulu okuva mu nsengeka eno zijja kutaasa okudda engulu kwo:
1. Tomala biseera ng'ogezaako okuzza fayiro okuva mu Macintosh HD (disk3s1): Okuva ku macOS Big Sur (11.0+), Macintosh HD ye kifaananyi ky’enkola ekissiddwako akabonero mu ngeri ya cryptographic, ekisomebwa kyokka (APFS Signed System Volume). Buli fayiro y'omukozesa omu, ekifaananyi, folda ya desktop, keychain, ne database bibeera ku munne Macintosh HD - Data eddoboozi (typically disk3s5 ku Apple Silicon oba disk2s1 / . disk1s1 ku Intel).
2. Lwaki FileVault oluusi egaana password yo entuufu oluvannyuma lw'okugwa (Preboot Okuggyawo okukwatagana):
Ku screen ya boot esooka ennyo (EFI / iBoot Preboot Login), aba... Macintosh HD - Data volume ekyali encrypted era nga tesobola kusomebwa. Mac ekakasa etya password yo nga disk tennasumululwa? Esoma kkopi ekwataganye eya password hash ya akawunti yo ey’omukozesa n’ensawo y’ekisumuluzo ey’ekyama ebiterekeddwa ku ** etali nsirifu .Preboot** eddoboozi (disk3s2). Bw’oba waakakyusa password yo ey’okuyingira mu Mac oba okulongoosa macOS n’... Preboot volume teyali ya kulongoosebwa (diskutil apfs updatePreboot), screen ya boot esooka egaana password yo empya nga diskutil apfs unlockVolume mu Recovery Terminal ekkiriza oba password yo enkadde oba empya amangu ddala.
3. Lwaaki APFS esigaza embeera ennungi enkadde ne bwe kiba nti ekifo ekisembyeyo okukeberebwa kyonoonese:
Buli mulundi APFS flushes ewandiika ku disk, te kuwandiika ku ebiriwo nx_superblock_t (Konteyina Superblock) oba apfs_superblock_t (Volume Superblock) mu kifo. Wabula, ewandiika superblock empya ddala mu Checkpoint Descriptor Area (xp_desc) ring buffer nga erina ID y'Ensimbi eyongezeddwa (xid). Singa amasannyalaze galemererwa oba kernel n'esattira nga ewandiika Transaction xid 950412, Enkolagana y’ebintu xid 950411 (eyawandiikibwa sekondi emabega) ekyatudde munda mu buffer y'empeta y'ekifo eky'okukebera ku disiki.
Omutendera 2: Okusumulula FileVault 2 okuva ku macOS Recovery Terminal nga Login oba GUI Eremereddwa¶
Boot mu macOS Recovery, ggulawo menu bar waggulu, era onyige Utilities -> Terminal.
Omutendera 1: Laba Container yo eya APFS era Macintosh HD - Data ekimanyisa ekyuma¶
Mu ddirisa lya Recovery Terminal, dduka:
Tunuulira mu bifulumizibwa omuti ku voliyumu n'omulimu ** .(Data)** ne FileVault: Yes (Locked):
+-- Container disk3 4A91F802-119B-4C0E-991A-0849182019AA
====================================================
APFS Container Reference: disk3
Size (Capacity Ceiling): 994662584320 B (994.7 GB)
...
+-> Volume disk3s5 8810B291-4410-4A11-B812-771928371900
---------------------------------------------------
APFS Volume Disk (Role): disk3s5 (Data)
Name: Macintosh HD - Data (Case-insensitive)
Mount Point: Not Mounted
FileVault: Yes (Locked)
disk3s5 n’ekyo kyonna diskXsY identifier yo (Data) volume eraga.)
Omutendera 2: Kebera Abakozesa Cryptographic bonna abatuufu (Key Wrapping Keys) ku voliyumu ya Data¶
Okulaba buli akawunti y’omukozesa, Personal Recovery Key (PRK), oba iCloud/Institutional key esobola okusumulula disk3s5, dduka:
Cryptographic User UUIDs:
- UUID z'omukozesa wa OpenDirectory ez'omu kitundu (Type: Local OpenDirectory User): Buli akawunti y'omukozesa wa macOS esobozeseddwa ku FileVault.
- ** EBC6C064-0000-11AA-AA11-00306543ECAC (Type: Personal Recovery User): Ennukuta 24 eziriko ennukuta Ekisumuluzo ky'okuzzaawo omuntu (XXXX-XXXX-XXXX-XXXX-XXXX-XXXX).
- ** Type: iCloud Recovery User / . Institutional Recovery User: Apple ID escrow oba MDM y'ekitongole (Jamf / . Kandji / . Intune) ekisumuluzo kya escrow.
Omutendera 3: Sumulula eddoboozi NGA NGA TOGETEESE (-nomount) .¶
Lwaki okuyita ** .-nomount** nga osumulula voliyumu ya APFS eyinza okwonooneka? Kubanga nga bwekiba, . diskutil apfs unlockVolume amangu ago egezaako okuteeka eddoboozi mu read-write mode, ekivaako okuddamu okuwandiika-journal mu ngeri ey'otoma oba okuwanirira Terminal singa B-tree eyonoonese. Okuyita -nomount esumulula Ekisumuluzo ky'Okusiba Volume eky'ensirifu (VEK) mu Secure Enclave nga tukuuma enkola ya fayiro nga tessibwako tusobole okugiteeka mu ngeri enkakali ey’okusoma kwokka mu Phase 3:
# Option A: Unlock using your macOS Login Password (try BOTH your current and previous passwords)
diskutil apfs unlockVolume /dev/disk3s5 -nomount
# Option B: Unlock using your 24-Character Personal Recovery Key (PRK) directly in Terminal
diskutil apfs unlockVolume /dev/disk3s5 -passphrase XXXX-XXXX-XXXX-XXXX-XXXX-XXXX -nomount
Warning
Lwaaki diskutil apfs unlockVolume awatali -nomount asobola okuwanirira Terminal ku muti gwa APFS B ogwonooneddwa: Ddi diskutil apfs unlockVolume adduka nga talina -nomount, macOS eyita amangu ago mount_apfs mu mbeera y’okusoma-okuwandiika, ekivaako Space Manager ey’otoma (spaceman) okugaba n’okukakasa omuti gwa B. Singa voliyumu erina Maapu y’Ekintu eyonoonese (omap_phys_t) oba torn leaf node, kernel thread esobola okuyimirira ekiseera ekitali kigere oba okutya embeera ya Recovery. Bulijjo yita -nomount sooka, olwo olinnye mu bulambulukufu ne mount_apfs -o rdonly.
Omutendera 4: Watya singa FileVault esumululwa bulungi era filesystem TEYONOONYE, era n'egaana password yo yokka ku boot?¶
Singa diskutil apfs unlockVolume /dev/disk3s5 yatuuka ku buwanguzi amangu ago era diskutil apfs verifyVolume /dev/disk3s5 alaga The volume Macintosh HD - Data appears to be OK, ekizibu kyo kyokka kyali kya desynchronized Preboot volume oluvannyuma lw'okukyusa password oba OS update. Kitereeze mu sikonda 5 Mac yo eddemu okutandika mu ngeri eya bulijjo:
# Mount the unlocked volume and force macOS to rebuild the Preboot login database:
diskutil mount /dev/disk3s5
diskutil apfs updatePreboot /dev/disk3s5
reboot), era kati screen yo ey'okuyingira ejja kukkiriza password yo ku kugezaako okusooka.
Omutendera 3: Okununula data nga fsck_apfs / Disk Utility Obuyambi obusookerwako bulemereddwa (Invalid APFS Superblock oba Object Map Invalid) .¶
Watya singa okusumulula disk3s5 emirimu (FileVault: Yes (Unlocked)), naye bw’ogezaako okugiteeka mu ngeri eya bulijjo, macOS egamba nti com.apple.DiskManagement.disenter error -119930868 / -69845 oba Disk Utility etegeeza nti:
- error: omap_phys_t: invalid omap_most_recent_snap
- error: nx_superblock_t: checkpoint map invalid
- fsroot tree is invalid
- File system verify or repair failed. : (-69845)
Goberera emitendera gino esatu egy’okunoonyereza ku misango egy’okulinnya okusobola okuggyamu fayiro zo ebitundu 100 ku 100 nga tonnaba kugezaako kuddaabiriza kwonna okusaanyaawo:
Enkola 1: Kaka okussa ku kernel Okusoma Yokka (mount_apfs -o rdonly) .¶
Ne bwe kiba nti voliyumu ya APFS egaana okulinnya mu mbeera y'okusoma-okuwandiika (kubanga macOS egaana okuteeka voliyumu ya APFS encaafu okusoma-okuwandiika ddi fsck_apfs asanga obutakwatagana bwa muti gwa B gumu), the apfs.kext ddereeva ajja kutera okukkiriza strictly read-only mount (-o rdonly):
# 1. Create a temporary mountpoint in the Recovery RAM disk
mkdir -p /Volumes/DataRescue
# 2. Force a read-only mount of the unlocked Data volume
mount_apfs -o rdonly /dev/disk3s5 /Volumes/DataRescue
# 3. Check if your home directory is accessible
ls -la /Volumes/DataRescue/Users/
ls -la /Volumes/DataRescue/Users/ ewandiika erinnya lyo ery’omukozesa, ssaamu USB SSD ey’ebweru oba hard drive (esengekeddwa nga APFS oba ExFAT, nga kirabika wansi /Volumes/MyExternalDrive) era okoppa dayirekita yo yonna ey’awaka amangu ago ng’okozesa ditto (ekuuma macOS extended attributes, resource forks, n'olukusa awatali kuggyamu ku fayiro za cache emu ezitasomebwa):
Enkola 2: Watya singa omuti gw’enkola ya fayiro obulamu (fsroot) eyonoonese? Teeka ekintu eky’omunda APFS Local Snapshot (mount_apfs -s) .¶
Wano we wali ekyokulwanyisa eky’ekyama ekya... APFS okudda engulu n’abakugu mu Apple Genius Bar bangi kwe babuusa amaaso:
Ne bw’oba nga tolina drive yo eya Time Machine ey’ebweru essiddwamu leero, macOS ekola automatically invisible, read-only APFS Local Snapshots (com.apple.TimeMachine.2026-10-31-140512.local oba com.apple.os.update-...) ddala ku SSD yo ey’omunda buli ssaawa era nga buli macOS software update tennabaawo.
Kubanga APFS Snapshot ye kikolo ky’omuti gwa B ekifuuse bbugumu, ekitali kikyuka (snap_meta_ext_phys_t), ne bwe kiba nti enkola ya fayiro enamu (fsroot) yayonooneka mu kiseera ky’okugwa eddakiika 10 emabega, ekifaananyi ekyakwatibwa essaawa 1 emabega kirina ekikolo kyakyo ekyetongodde, ekitali kyonoonese ekya B-tree.
- Wandiika ebifaananyi byonna eby’omunda ebya APFS ebibeera ku voliyumu yo eya Data etaliiko kkufulu (
disk3s5): Laba ebifulumizibwa: - Teeka ekifaananyi ekisembyeyo butereevu mu
/Volumes/SnapRescuenga bakozesamount_apfs -s: - Browse
/Volumes/SnapRescue/Users/yournameera koppa folda yo yonna ey'omukozesa off ku drive yo ey'ebweru neditto:
Enkola 3: Okukebera Superblocks enkadde eza Container Checkpoint (nx_superblock_t) nga balina fsck_apfs¶
Watya singa Container ya APFS yonna (/dev/disk0s2 -> disk3) egaana okugattako, oba byombi eddoboozi ery'obulamu n'olukalala lw'ebifaananyi biremererwa kubanga Container Superblock eyasembyeyo (nx_superblock_t) ku mutwe gwa checkpoint ring buffer yayulika mu kiseera ky'okufiirwa amasannyalaze mu bwangu?
- Sooka okole okukakasa okuzuula okusoma kwokka okutali kwa kuzikiriza (
-n) ku kitundu kya APFS ekirabika (/dev/disk0s2) okulaba ID ki ey’okutunda (xid) eremereddwa: - OLUVANYUMA lw'okugezaako Enkola 1, Enkola 2, oba okukuba ekifaananyi ky'ekitundu (
ddku disiki ey'ebweru ng'oyita mu Target Disk Mode / Share Disk), ddukafsck_apfsmu mbeera y’okukwatagana/okuddaabiriza (-y) oba nga olina okukebera ebifo eby’okukebera eby’edda (-o/ .-Sbendera we ziwagirwa okuzimba Recovery): Ddi lwefsck_apfsalaba nti ekipyanx_superblock_tmunda mu Checkpoint Descriptor Area erina omuwendo gw’okukebera ogwa Fletcher-64 ogutali mutuufu (obj_cksum), etambula butereevu emabega ng’eyita mu buffer y’empeta y’ekifo ekyekulungirivu (xp_desc_blocks) okuzuula ebyafaayo ebituufu ebisinga waggulunx_superblock_t(xid - 1), ezzaawo embeera y’ekintu emabega ne sikonda ntono, era n’ezzaawo ebifo ebiteekebwamu eddoboozi.
Tip
Engeri y'okukuba ekifaananyi oba okuyingira mu SSD ey'omunda eya Mac etasobola kutandika okuva ku Mac eyookubiri (Apple Silicon Share Disk vs. Intel Target Disk Mode): Singa Mac yo tesobola kussa volume mu Recovery era oyagala okuddukanya ebikozesebwa bya forensic APFS (R-Studio for Mac, . UFS Explorer, . Disk Drill, oba apfs-fuse) okuva ku Mac eyokubiri ekola, kwata Mac zombi ne Thunderbolt / USB-C cable:
- Ku Intel Mac: Kwata T ku kussaako amasannyalaze (Target Disk Mode), ekiraga SSD ey’omunda ng’ekyuma ekiziyiza Thunderbolt ekibisi eri Mac eyookubiri.
- Ku Apple Silicon Mac (M1/M2/M3/M4): Boot mu macOS Recovery, nyweza Ebikozesebwa -> Gabana Disiki, londa Macintosh HD, era onyige Start Sharing (oba boot mu DFU / Apple Configurator 2 Restore yokka singa oba omaze okutereka data, nga DFU Restore bw’esangula ebisumuluzo bya SEP).
Omutendera 4: Okuddaabiriza Ekyuma ky’Ekiseera Ekyonoonese .sparsebundle ("Time Machine Must Create a New Backup") .¶
Singa backup yo eya Time Machine ebeera ku Synology/QNAP/TrueNAS network share (SMB) oba drive ey'ebweru munda mu ** .<MacName>.sparsebundle** (oba .backupbundle) package, era macOS efuluma:
"Time Machine emalirizza okukakasa backups zo ku 'NAS'. Okulongoosa obwesigwa, Time Machine erina okukukolera backup empya."
TOnyiga "Start New Backup" (okunyiga button eyo kisazaamu backup yo yonna ey'emyaka mingi .sparsebundle). Wabula, ddaabiriza sparsebundle mu kifo ng’okozesa emitendera gino ena ku Mac yo:
| Ekitundu kya Sparsebundle | Ekkubo Munda <Name>.sparsebundle/ |
Ekyonooneka oluvannyuma lwa Wi-Fi Okugwa oba Okwebaka Okukutuka | Engeri gyetukitereezaamu Wansi |
|---|---|---|---|
** Info.plist & Info.bckup ** |
MyMac.sparsebundle/Info.plist |
Time Machine bw'awandiika <key>VerificationState</key><integer>2</integer> (Okussaako akabonero ku bundle "Permanently Bad / Corrupted") kale egaana okuddamu okugezaako okugiteeka. |
Okuddamu okuteekawo VerificationState okuva 2 okudda ku 0 era n’okuggyawo RecoveryBackupDeclinedDate. |
** token & bands/ ** |
MyMac.sparsebundle/bands/* |
macOS ereka sparsebundle mu mbeera ya "encaafu / ekozesebwa", oba ey'omunda APFS / . HFS+ katalogu B-omuti munda mu 8 MB fayiro za bbandi zirina ensobi entonotono mu jurnal. |
Attach ne hdiutil attach -nomount -readwrite n’okudduka fsck_apfs -y (macOS Big Sur +) oba fsck_hfs -fy (macOS Catalina & abakulu). |
Ekyuma ky’Obudde mu mutendera ku mutendera .sparsebundle / . .backupbundle okununula abantu¶
- Mount omugabo gw'omukutu (
SMB) oba USB drive mu Finder osobole okulabaYourMac.sparsebundle(okugeza, ku/Volumes/TM_Share/YourMac.sparsebundle). - Sumulula ekintu kyonna ekitakyuka
uchgbendera ku bbandi za sparsebundle: Ggulawo Terminal ku Mac yo era owe Full Disk Access ku Terminal (System Settings -> Privacy & Security -> Full Disk Access), olwo odduke: - Teegatta ku...
.sparsebundlenga raw read-write virtual disk NGA TEWANDIIKO nkola yaayo eya fayiro eyonoonese (-nomount): Laba bulungi ekifuluma kya terminal: - Kebera oba backup yo eya Time Machine ekozesa
APFS(macOS 11 Big Sur n’empya) obaHFS+(macOS 10.15 Catalina n'okusingawo), era okole okuddaabiriza enkola ya fayiro ekwatagana: - Singa
/dev/disk5s2bw’agambaApple_APFS: Ddukadiskutil apfs listokulaba ekiwandiiko ekigatta APFS Container reference fordisk5s2(okugeza,Container disk6, Omuzingodisk6s1), kisumulule singa kiba kikubiddwa ensirifu (diskutil apfs unlockVolume /dev/disk6s1 -nomount), n’okuddukafsck_apfs: - Singa
/dev/disk5s2bw’agambaApple_HFSobaApple_HFSX: Dukanya katalogu ya HFS+ B-omuti okuddamu okuzimba (-drfyeddaamu okuzimba katalogu B-omuti bwe kiba nga kya mutindo-fyalemererwa): - Yakutula ku virtual disk eddaabiriziddwa bulungi:
- Okulongoosa embeera ya "Obutwa / Okukakasa Kulemeddwa" (
VerificationState = 2) mundaInfo.plisteracom.apple.TimeMachine.MachineID.plist: Ne bwe kiba nga kiweddefsck_apfsobafsck_hfsetereeza ebitundu 100 ku 100 eby'ensobi z'enkola ya fayiro, Time Machine ejja ekyali okugaana okukozesa backup okutuusa lw'oggyawo bendera y'okulemererwa gye yawandiikamucom.apple.TimeMachine.MachineID.plistmunda mu sparsebundle:Kati nyweza Back Up Now mu Time Machine (oba ggulawo# Back up the plist first cp "/Volumes/TM_Share/YourMac.sparsebundle/com.apple.TimeMachine.MachineID.plist" ~/Desktop/MachineID.plist.bak # Edit the plist using plutil / PlistBuddy to reset VerificationState from 2 to 0 /usr/libexec/PlistBuddy -c "Set :VerificationState 0" "/Volumes/TM_Share/YourMac.sparsebundle/com.apple.TimeMachine.MachineID.plist" /usr/libexec/PlistBuddy -c "Delete :RecoveryBackupDeclinedDate" "/Volumes/TM_Share/YourMac.sparsebundle/com.apple.TimeMachine.MachineID.plist" 2>/dev/nullYourMac.sparsebundlemu Finder okukoppa fayiro okuva butereevu): ebyafaayo byo byonna eby'okutereka timeline mounts cleanly.
Omutendera 5: Okukakanyaza macOS APFS, FileVault, ne Time Machine okuva ku kuggalwa mu biseera eby’omu maaso¶
Data yo eya Mac bw’emala okununulibwa, jjuzaamu olukalala luno olw’emitendera 4 egy’okuziyiza:
- Kakasa era okukuba kkopi ey’omubiri ey’ekisumuluzo kyo eky’ennukuta 24 ekya FileVault Personal Recovery Key (
fdesetup): Ku Mac ekola, kakasa nti ekisumuluzo kyo ekya FileVault kituufu nga tokikyusizza ng’okolasudo fdesetup changerecovery -personal(ekola Personal Recovery Key empya ey’ennukuta 24 gy’osobola okutereka amangu ddala mu offline password manager yo ne physical fire safe). - Bulijjo kuuma waakiri
15%(50 GBokutuuka ku100 GB) eky'ekifo eky'obwereere ku disiki y'okutandika APFS: Nga ekintu ekitereka APFS kijjula okutuuka ku99%obusobozi nga tebannaba kulongoosa nkola ya macOS Sonoma/Sequoia, omuteeka ne APFS Copy-on-Write Object Map (omap) esobola okuggwaamu bulooka ez’obwereere wakati mu kulongoosa, okusiba Mac mu bootloop etasobola kutandika (Error -69845). - Kuuma ebigendererwa bibiri ebyetongodde ebya Time Machine (oba gatta Time Machine ne...
rsync/ Carbon Copy Cloner / Arq backup): Kubanga Time Machine ekyusakyusa backups mu bifo ebiwerako ebitegekeddwa (e.g., NAS SMB Share + Local USB-C SSD), okubeera ne USB-C SSD eyungiddwa butereevu kikakasa nti tosigama ku mutimbagano gwokka.sparsebundleekyo kiyinza okwonoona singa Wi-Fi egwa wakati mu kuwandiika. - Toggalawo kibikka kya MacBook oba okusika waya ya USB-C nga Time Machine egamba
Cleaning up...obaPreparing backup...: Omutendera ogwo gutereeza ekifaananyi kya APFS B-omuti erasparsebundlemaapu ya bbandi.
Ennamba z’embeera ez’amangu mu bitundu n’ebiragiro by’ebitongole¶
Wadde nga voliyumu ya FileVault eriko kkufulu oba backup ya Time Machine eyonoonese mu budde obutuufu kiba kizibu kya IT eky’obuntu oba eky’ekitongole, okuggalwa kw’ebifo ebikolerwamu okukosa obujjanjabi, empeereza ez’amangu, oba okukuuma data mu mateeka kutwala ebyetaago ebitongole eby’okulinnyisa omutindo:
- Amerika ne Canada: Kuba
911singa okuggalwa kw’ekifo we bakolera kukosa okulabirira abalwadde mu malwaliro, ebyuma ebikebera, oba okusindika mu bwangu. Ku bitongole by’ebyobulamu (HIPAA), weetegereze nti nga full-diskFileVault 2(AES-XTS-128) egaba Safe Harbor okulwanyisa okubikkula okutakkirizibwa singa laptop ebbibwa, okufiirwa enkalakkalira ebiwandiiko by’abalwadde ebitaliiko bbugumu kiba kizibu kya kubeerawo wansi w’etteeka ly’ebyokwerinda erya HIPAA (45 CFR § 164.308(a)(7)). - Bungereza: Kuba
999ku mbeera ez’amangu ezikosa obukuumi bw’obulamu oba enkola z’obujjanjabi eza NHS ez’amangu. Okukebera okufiirwa okw’olubeerera okw’ebikwata ku muntu ebitaliiko bbugumu wansi wa UK GDPR Article 33 (ICO, .0303 123 1113). - Omukago gwa Bulaaya: Kuba
112mu mawanga gonna agali mu mukago gwa EU. Okufiirwa enkalakkalira okubeerawo kw’ebikwata ku muntu oba okuvaako kw’empeereza enkulu kyetaagisa okwekenneenya wansi wa GDPR Ennyingo 33 (essaawa 72) ne NIS2 (essaawa 24 ku bitongole ebibikkiddwa). - Australia ne New Zealand: Kuba
000mu Australia oba111mu New Zealand okusobola okukola ku mbeera ez’amangu. - Buyindi ne Asia-Pacific: Kuba
112mu Buyindi olw’okukola ku mbeera ez’amangu; lipoota ku by’okwerinda by’ekitongole oba ebibaddewo wansi w’amateeka agakola ku CERT-In ne DPDP Act.
Ebibuuzo ebitera okubuuzibwa¶
Lwaki Mac yange eraga volumes BBIRI mu Disk Utility (Macintosh HD era Macintosh HD - Data), era lwaki okwongera ku voliyumu eyokusatu kyaliwo oluvannyuma lw’okuddamu okuteeka macOS?¶
Okutandika mu macOS Catalina (10.15) ne Big Sur (11.0), Apple yayawulamu enkola y’emirimu mu ngeri esomebwa yokka Voliyumu y’enkola (`Macintosh HD`) . n’okusoma-okuwandiika Omuwendo gwa data (`Macintosh HD - Data`) . zigatta wamu nga **APFS Volume Group** (kale Finder eziraga nga drive emu). Singa omuntu addamu okuteeka macOS ku voliyumu enkyamu nga tasangula bulungi Volume Group, Disk Utility ekola ekikoppi `Macintosh HD - Data - Data` volume ate nga fayiro zo ezasooka zisigala nga zitudde munda mu enkadde ezitassiddwa `Macintosh HD - Data` volume. Dduka `diskutil apfs list` mu Terminal, ssaako Data volumes zombi, era okebere `/Volumes/
Watya singa nneerabidde BY'OKUyingira Mac yange password NE FileVault Recovery Key yange ey'ennukuta 24, era nga sisobozesa iCloud FileVault escrow?¶
Singa `FileVault 2` ekoleddwa ku Apple Silicon (`M1/M2/M3/M4`) oba Intel `T2` Mac era tolina password yonna ntuufu ya mukozesa, Personal Recovery Key, iCloud Recovery escrow, oba corporate MDM Institutional Recovery Key (`Jamf / Intune`), . mu ngeri ya cryptographic tekisoboka kuggyamu SSD ey'omunda: wadde Apple Engineering oba cleanroom lab tesobola brute-force yingini ya AES esibiddwa ku hardware munda mu Secure Enclave (ekaka hardware time-delays wakati w'okugezaako). Kyokka nga tonnaba kulekulira, kebera ebifo bisatu ekisumuluzo kyo we kiyinza okuba nga kikyaliwo: (1) kebera oba akawunti endala ey’omukozesa wa Admin eriwo ku Mac (`diskutil apfs listcryptousers`); (2) kebera oba Mac yo yali ewandiisiddwako mu MDM ya mukama wo (ekwata ekisumuluzo ky’okuzzaawo FileVault mu ngeri ey’otoma); oba (3) kebera iCloud Drive yo / Ebifaananyi / Time Machine backups.
Lwaki yakola diskutil apfs unlockVolume okulemererwa ne Error: -69593: Checksum verification failed oba Invalid password (-69507) nga nkimanyi nti password yange eri 100% kituufu?¶
Okusooka, kebera **Keyboard Layout** yo mu nsonda eya waggulu ku ddyo ku screen ya macOS Recovery: Recovery etera okusooka `U.S. QWERTY` ne bwe kiba nti MacBook yo erina eya Bungereza, Olugirimaani (`QWERTZ`), Olufaransa (`AZERTY`), oba Dvorak keyboard, ekivaako obubonero (`@`, . `"`, . `-`, . `_`, . `y/z`) mu password yo okuwandiika ennukuta enkyamu. Wandiika ekigambo kyo eky’okuyingira mu kiragiro ekirabika ekya Terminal osobole okulaba ennukuta entuufu ku ssirini, olwo okoppa n’okiteeka mu kiragiro ky’ekigambo ky’okuyingira.
Nsobola okuzzaawo fayiro ezisaziddwamu okuva ku APFS Mac SSD nga nkozesa PhotoRec oba Disk Drill singa mu butanwa nnafulumya Kasasiro?¶
Ku Mac yonna ey’omulembe eriko SSD ey’omunda, nga fayiro esaziddwamu ate nga Trash etaliimu kintu kyonna (era nedda `APFS Local Snapshot` ejuliza bulooka ezo), macOS amangu ago esindika hardware **NVMe `Deallocate (TRIM)`** ekiragiro eri SSD controller, ekikola zero ku bulooka ezitali ku maapu mu sikonda ntono. N'olwekyo, **ekkubo lyo #1 ery'okuzzaawo oluvannyuma lw'okuggyamu Kasasiro ku Mac SI kibumbe ekibisi: kiri mu kussaako amangu ddala an `APFS Local Snapshot` (`diskutil apfs listSnapshots /` era `mount_apfs -s`) nga ekifaananyi kya buli ssaawa tekinnakyuka**, nga bwe kinnyonnyoddwa mu nkola ya Phase 3 2 waggulu.
Lwaki Mac yange yaggwaamu ekifo ku disiki nga tennagwa nga nsazaamu fayiro za vidiyo eza GB 100 eddakiika 10 emabega?¶
Kubanga `APFS` ye nkola ya fayiro ya Copy-on-Write, okusazaamu a `100 GB` file **te** kusumulula abo `100 GB` wa disiki blocks singa buli ssaawa **APFS Local Snapshot** (`com.apple.TimeMachine.*.local`) eyatwaliddwa emabegako leero ekyasonga ku bulooka ezo (`Purgeable Space`). Singa Mac yo tesobola kutandika oba okumaliriza update kubanga snapshots zikutte `100 GB` wa space hostage, boot mu Recovery Terminal, okusumulula `Macintosh HD - Data`, wandiika ebifaananyi ebikutte ne `diskutil apfs listSnapshots /dev/disk3s5`, era osazeeko ekifaananyi ekisinga obukadde nga kiriko `diskutil apfs deleteSnapshot /dev/disk3s5 -name
Nkoppa ntya fayiro okuva mu Time Machine ennungi oba eddaabiriziddwa .sparsebundle ku Windows oba Linux PC singa Mac yange yafa ddala?¶
Ekyuma Ekikwata Ebiseera `.sparsebundle` ye dayirekita yokka erimu ebikumi n’ebikumi `8 megabyte` fayiro za chunk (`bands/0`, . `bands/1`, . `bands/2`...) ezigatta wamu okukola ekifaananyi kya disiki ekirabika. Ku Linux (Ubuntu), osobola fuse-mount bbandi za sparsebundle mu kyuma kimu ekya virtual block ng’okozesa ** .`sparsebundlefs`** (`sudo sparsebundlefs /mnt/nas/MyMac.sparsebundle /mnt/virtual_img`), n’oluvannyuma ssaako voliyumu ya APFS ey’omunda esomebwa yokka ng’okozesa ** .`apfs-fuse`** (`sudo apfs-fuse /mnt/virtual_img/sparsebundle.dmg /mnt/mac_files`) oba okuggulawo `.sparsebundle` butereevu mu **UFS Explorer** / **R-Studio** ku Windows.
Ebiragiro ebikwatagana nabyo¶
- macOS kernel panic, screen enzirugavu, n'okudda engulu
- BitLocker, FileVault, ne LUKS okuzzaawo ensirifu okuggalawo ekisumuluzo n'okuddamu okutereeza TPM
rm -rfobaShift+Deletemu butanwa ku Linux, macOS, oba Windows: okuddamu okuteekebwa mu bwangu okusoma kwokka- VeraCrypt, BitLocker, oba Cryptomator eyonoonye omutwe gw'eddoboozi, okuzzaawo omutwe gw'okutereka, n'okuzzaawo ekisumuluzo kya RAM
- SSD ne NVMe mode okusoma kwokka okw'amangu, 0% spare blocks, ne TRIM okulemesa okununula
- Okutereka kompyuta, enkola ya 3-2-1, n’okuddamu okukola mu mbeera y’akatyabaga
- Ennamba z’amangu okusinziira ku nsi
Ensonda n’obulagirizi obutongole¶
- Apple Inc. (
developer.apple.com): Enkola ya Fayiro za Apple (APFS) Ekiwandiiko ekijuliziddwa: Container Superblock (nx_superblock_t), Ennyonyola y'ekifo eky'okukebera Ring Buffer (xp_desc), Maapu y'Ebintu (omap_phys_t), n’Enzimba z’ebifaananyi eby’obuzito. - Ekitabo ky’ebyokwerinda ku mukutu gwa Apple (
support.apple.com/guide/security): FileVault 2 Enzimba y'okusiba Disiki enzijuvu, Okuzinga ebisumuluzo bya Enclave eby'obukuumi (VEK/ .KEK), n’okukwataganya eddoboozi nga tonnatandika. - Apple macOS Man Emiko:
diskutil(8), .fsck_apfs(8), .mount_apfs(8), .hdiutil(1), erafdesetup(8)Ekiwandiiko ky’okuddukanya enkola. - Ekitongole ky’eggwanga ekikola ku mutindo ne tekinologiya (
NIST) (Amerika): Ekiwandiiko eky’enjawulo 800-111: Ekitabo ekikwata ku tekinologiya w’okusiba okutereka ku byuma by’omukozesa ow’enkomerero.