Skip to content

macOS FileVault kapa Time Machine Sparsebundle e Senyehile: Tokiso ea APFS Container Superblock, Mount ea Sebaka sa Snapshot, le Recovery Key Terminal Unlock

Linomoro tsa maemo a tšohanyetso li fapana ho ea ka linaha. Leqephe lena le sebelisa 911, nomoro ea United States le Canada. Linaha tse ling tse ngata li sebelisa 112, 999, kapa nomoro e ’ngoe. Fumana nomoro ea naha ea heno.

Ha u bona MacBook Pro, MacBook Air, Mac Studio, kapa iMac e hana ho qala ka foldara e benyang ea matšoao a lipotso , lets'oao le thibelang le selika-likoe le lehare (support.apple.com/mac/startup), skrine ea ho kena e hanang phasewete ea hau e tsebahalang kamora ho senyeha ha ntlafatso ea macOS, kapa tlaleho ea Disk Utility Error: -69845: File system verify or repair failed / Invalid APFS superblock / Object map is invalid ke bothata bo boholo ba polokelo ea macOS. Ho hobe le ho feta, ha o hokela NAS ea hau ea kantle kapa USB Time Machine backup drive ho khutlisa lifaele tsa hau, macOS hangata e hlahisa phoso ea bobeli e senyang: klzzwxh:02 (ho notlela kantle .sparsebundle). Se ke oa tobetsa Erase Mac kapa u tlohelle Time Machine ho hlakola nalane ea hau ea bekapo. Hobane Apple File System (APFS) ke Kopi-on-Ngola (CoW) tsamaiso ea tsamaiso ea tsamaiso e bolokang li-superblocks tsa histori (nx_superblock_t) le li-snapshots tsa lehae feela ka ho le letona ho disk, o ka bula FileVault ka linako tsohle mme oa beha sebaka sa khale sa tlhahlobo sa transaction se tsoang ho MacOS Recovery Terminal. Haeba Mac ea hau e na le kernel panic loop kapa skrine e ntšo ho fapana le phoso ea molumo oa APFS, bona. Tšabo ea kernel ea macOS, skrine e ntšo, le ho hlaphoheloa; bakeng sa ho koaloa ha li-cross-platform encryption (BitLocker, FileVault, LUKS), bona BitLocker, FileVault, le LUKS encryption recovery keylockout le TPM reset le ka phoso rm -rf kapa Shift-Delete ho ext4, XFS, APFS, le NTFS: bala-feela remount. Haeba ho koaloa ha setsi sa mosebetsi ho ama tlhokomelo ea bongaka ea sepetlele, thomello ea tšohanyetso, kapa ts'ebetso ea ts'ireletso ea bophelo, letsetsa nomoro ea hau ea tšohanyetso ea lehae (911 United States le Canada, 112 ho pholletsa le European Union, 999 United Kingdom) kapa sheba bukana ea rona ea dinomoro tsa tshohanyetso.

Etsa sena hona joale

  1. ** SE KE UA tobetsa "Erase Mac," "Erase Volume Group," kapa "Start New Backup" ho Mochini oa Nako **: Le ha konopo ea Disk Utility ** First Aid ** e hlōleha File system verify or repair failed (-69845) kapa fsck_apfs e tsoa ka khoutu 8, lifaele tsa hau tse kentsoeng ka har'a Macintosh HD - Data (kapa mochini oa hau oa nako .sparsebundle band) ba ntse ba tiile 'meleng ho SSD.
  2. ** Qala ho kena macOS Recovery (Utilities -> Terminal) hanghang ho emisa bokamorao TRIM le Kopitsa-on-Ngola ho potoloha ha sebaka**:
  3. Ho Apple Silicon Macs (M1, M2, M3, M4): Koala Mac ka ho feletseng, ebe o tobetsa le ho tšoara **Matla (Touch ID) konopo ** bakeng sa metsotsoana e 10 ho fihlela skrine e re Loading startup options.... Tobetsa **Dikgetho ** -> Tswelela.
  4. Ho Intel Macs: Bulela Mac 'me hang-hang u tšoare Command (⌘) + R (kapa Option + Command + R bakeng sa Pholoso ea Marang-rang) ho fihlela logo ea Apple kapa globe e potolohang e hlaha.
  5. Haeba graphical Recovery Assistant e ts'oareha ho u kopa hore u khethe mosebelisi eo phasewete ea hae e hanang ho e amohela, le ka mohla u se tobetse. Erase Mac hodimo-leqeleng Recovery Assistant menu. Ho e-na le hoo, batla "U lebetse li-passwords kaofela?" (e bulang senotlolo sa 24 Personal Recovery Key kapa iCloud Apple ID notlolla kapele) kapa sebelisa Utilities menu ya ho qala ** Terminal **.
  6. ** Notlolla FileVault 2 ka letsoho ho tsoa ho Recovery Terminal (diskutil apfs unlockVolume) pele o leka kopi kapa kopi ea faele **: Ha molumo oa APFS o kentsoe ka FileVault, Macintosh HD - Data e lula e sa bonahale (Locked: Yes) ho fihlela o e notlolla. Ho Recovery Terminal, matha diskutil apfs list ho fumana node ea sesebelisoa sa data ea hau (hangata disk3s5 ka Apple Silicon kapa disk2s1 ho Intel) ebe o matha diskutil apfs unlockVolume /dev/disk3s5 (ka password ea hau ea ho kena) kapa diskutil apfs unlockVolume /dev/disk3s5 -recoverykeychain / -passphrase <24-CHAR-RECOVERY-KEY>.
  7. Haeba Macintosh HD - Data notlolla (Unlocked: Yes) empa e hloleha ho ngola ho bala ka lebaka la Sefate sa B se senyehileng kapa 'Mapa oa Ntho (omap), e behe ka thata BALA FEELA (mount_apfs -o rdonly) kapa ho palama e kgolohadi APFS Local Snapshot (mount_apfs -s): Ha u feta -o rdonly (kapa beha senepe sa sebaka sa hora sa Time Machine se bolokiloeng ho SSD e kahare ka hora mount_apfs -s), mokhanni oa kernel oa APFS o tlola phetisetso ea koranta mme o o lumella ho kopitsa liperesente tse 100 tsa /Users/yourname ho drive ea kantle ea USB ka rsync kapa cp -R.
  8. **Le ka mohla u se ke ua matha fsck_apfs -y khafetsa ho SSD e hlolehang pele u ntša lifaele tsa hau tse baloang feela **: Haeba 'mapa oa APFS Object (omap_phys_t) kapa Extent Reference Tree e senyehile, e qobella ho lokisoa ho bala le ho ngola ka fsck_apfs -y e ka hlakola li-node tse senyehileng tsa directory. Leka kamehla mount_apfs -o rdonly le kopi /Users/ ho drive ea kantle pele, ebe o matha feela fsck_apfs kamora moo.
  9. Bakeng sa Mochini oa Nako o senyehileng .sparsebundle (Backup Verification Failed), hlakola the com.apple.backupd.ModelID notlela lifolakha ka hare Info.plist, hokela sparsebundle ka hdiutil attach -nomount -readwrite, le ho lokisa molumo o ka hare oa APFS/HFS+ ka fsck_apfs kapa fsck_hfs: O ka lula o boloka nalane ea bekapo le sparsebundle e phelang ntle le ho qala bocha.

Danger

** Hobaneng o sa tlameha ho seta NVRAM bocha kapa ho tlosa Mac ho iCloud Find My haeba senotlolo sa hau sa FileVault se kentsoe ho iCloud (institutional kapa iCloud recovery) ntle le ho sheba senotlolo sa hau sa ho Pholiso ea Motho ka batho ba 24 pele**: Ho Mac ka Apple T2 Tšireletso Chip kapa Apple Silicon (M1/M2/M3/M4), molaoli oa SSD oa hardware o koala leqephe le leng le le leng la NAND ha a phomola a sebelisa senotlolo sa hardware se inehetseng ka hare ho Secure Enclave (SEP), e phuthetsoe ke KeyVault Volume Encryption Key (VEK). Ho na le zero backdoor ho feta encryption e sireletsehileng ea Enclave haeba li-wrappers tsohle tsa li-cryptographic key (KEKs - Lekunutu la mosebelisi, Senotlolo sa Pholoso ea Motho, Pholoso ea iCloud, kapa Senotlolo sa Setsi sa MDM) se senyehile.


Sefate sa liqeto: Mac e sa khoneng ho sebetsa, FileVault e notletsoeng, kapa teko ea Time Machine e senyehileng

Sebelisa lethathamo lena ho kena macOS Recovery (Utilities -> Terminal) ho khetha tsela e nepahetseng ea ho hlaphoheloa e sa senyeheng:

flowchart TD
    Start["Boemo ba Tšohanyetso: Mac Unbootable, FileVault Hana Password, kapa Time Machine Corrupted"] --> WhichIssue{"U Tobane le Tlokotsi Efe?"}

    WhichIssue -->|"1. Internal Mac SSD Unbootable (? Folder / Prohibitory Sign / Phoso ea Thuso ea Pele -69845)"| BootRec["Kena ka har'a Pholiso ea macOS -> Lits'ebeletso tse Bula -> Seteishene -> Matha: diskutil apfs list"]

    WhichIssue -->|"2. FileVault Ho hana Password e Tsejoang ea Mosebelisi kapa Ho Kopa Senotlolo sa ho Pholosa"| FVFix["Ho Mothusi oa Pholiso: Tobetsa 'U lebetse li-password tsohle?' KAPA Matha diskutil apfs listcryptousers ho Terminal"]

    WhichIssue -->|"3. Mochine oa Nako o re: bekapo e senyehile / e tlameha ho theha bekapo e ncha"| TMFix["Mount Network/USB Drive -> Hlahloba .sparsebundle/Info.plist -> hdiutil attach -nomount -> fsck_apfs / fsck_hfs"]

    BootRec --> ContainerOk{"Na lethathamo la diskutil apfs Bontša APFS Container & Volumes (Macintosh HD - Data)?"}

    ContainerOk -->|"Che: Sets'oants'o sa APFS ha se eo kapa 'Superblock ea APFS e sa sebetseng'"| SuperblockRec["Sheba Li-Superblocks tse Fetileng tsa APFS (nx_superblock_t) & Mount Read-Only ka fsck_apfs -n / apfs-fuse"]

    ContainerOk -->|"E: Meqolo e thathamisitsoeng (mohlala, disk3s5)"| UnlockStep["Notlolla FileVault ntle le ho Holima: diskutil apfs notlollaVolume /dev/disk3s5 -nomount"]

    UnlockStep --> TryRO["Leka ho Bala Feela Thaba: mkdir / Volumes/Rescue && mount_apfs -o rdonly /dev/disk3s5 /Volumes/Rescue"]

    TryRO --> DidMount{"Na /Volumes/Rescue Mount Cleanly?"}
    DidMount -->|"Ee"| CopyData["Hokela ExFAT/APFS External USB Drive -> Copy / Volumes/Rescue/Users/<you> Hang-hang ka ditto kapa rsync"]
    DidMount -->|"Che: mount_apfs e khutlisa khang e sa sebetseng / phoso ea ho kenya letsoho"| SnapMount["Thathamisa Li-Snapshots tsa ka hare tsa APFS (diskutil apfs listSnapshots) -> Mount Pre-Crash Snapshot ka mount_apfs -s"]

    FVFix --> UnlockStep

Mohato oa 1: Ho utloisisa APFS Container, Volume Group, le FileVault Key Hierarchy

Pele o thaepa litaelo ho terminal ea ho khutlisa ea macOS, utloisisa hore na macOS ea sejoale-joale (Catalina 10.15 ka Monterey, Ventura, Sonoma, le Sequoia) e beha SSD ea ka hare mme hobaneng Macintosh HD HASE moo lifaele tsa hau li lulang teng.

+-------------------------------------------------------------------------+
| MODERN macOS APFS CONTAINER & FILEVAULT ARCHITECTURE                    |
|                                                                         |
| Physical Apple SSD (/dev/disk0)                                         |
|  +-- Partition 1: Apple_APFS_ISC (iBoot System Container - Apple Sil.)  |
|  +-- Partition 2: Apple_APFS (Main Container -> Synthesized /dev/disk3) |
|       |                                                                 |
|       +-- [nx_superblock_t] Container Superblock & Checkpoint Ring      |
|       +-- [omap_phys_t] Container Object Map (Virtual -> Physical Block)|
|       |                                                                 |
|       +-- Volume 1 (disk3s1): "Macintosh HD" (Signed System Volume SSV) |
|       |    -> Strictly Read-Only OS files. Contains 0 user documents.   |
|       +-- Volume 2 (disk3s5): "Macintosh HD - Data" (FileVault Locked)  |
|       |    -> YOUR ACTUAL DATA (/Users, /Applications, /Library, /var)  |
|       +-- Volume 3 (disk3s2): "Preboot" (FileVault Login Users & Wi-Fi) |
|       +-- Volume 4 (disk3s3): "Recovery" (macOS Recovery OS)            |
|       +-- Volume 5 (disk3s4): "VM" (Swapfile & Sleepimage)              |
+-------------------------------------------------------------------------+

Lintlha tse tharo tsa bohlokoa tse tsoang moahong ona li tla pholosa ho hlaphoheloa ha hau: 1. Le ka mohla u se ke ua senya nako ho leka ho khutlisa lifaele ho tsoa Macintosh HD (disk3s1): Ho tloha ka macOS Big Sur (11.0+), Macintosh HD ke senepe se tiisitsoeng ka mokhoa o hlakileng, se balang feela (APFS Signed System Volume). Faele e 'ngoe le e' ngoe ea mosebelisi, foto, foldara ea komporo, keychain, le database li lula ho molekane Macintosh HD - Data molumo (typically disk3s5 ka Apple Silicon kapa disk2s1 / disk1s1 ho Intel). 2. Hobaneng FileVault ka linako tse ling e hana phasewete ea hau e nepahetseng kamora ho oa (Preboot Desynchronization): Ka skrineng sa pele sa boot (EFI / iBoot Preboot Login), tse Macintosh HD - Data bophahamo ba modumo bo ntse bo patilwe mme ha bo balwe. Mac e netefatsa password ea hau joang pele disk e notletsoe? E bala kopi e hokahantsoeng ea password ea ak'haonte ea hau ea mosebelisi le mokotlana oa senotlolo o bolokiloeng sebakeng se sa ngolisoang Preboot molumo (disk3s2). Haeba u sa tsoa fetola phasewete ea hau ea ho kena ea Mac kapa u nchafalitse macOS le faele ea Preboot molumo ha oa ntlafatsoa (diskutil apfs updatePreboot), skrine ea pele ea boot e hana phasewete ea hau e ncha ha u ntse u diskutil apfs unlockVolume ho Recovery Terminal e amohela phasewete ea hau ea khale kapa e ncha hang-hang. 3. Hobaneng APFS e boloka maemo a bophelo bo botle le ha tlhahlobo ea morao-rao e senyehile: Nako le nako APFS flushes e ngolla disk, ha e ** ha ** e hlakola e teng nx_superblock_t (Setshelo Superblock) kapa apfs_superblock_t (Volume Superblock) sebakeng. Sebakeng seo, e ngola sengoloa se secha sebakeng sa Checkpoint Descriptor Area (xp_desc) ring buffer e nang le ID e ekelitsoeng ea Transaction (xid). Haeba matla a felloa ke matla kapa kernel ea tšoha ha u ntse u ngola Transaction xid 950412, Transaction xid 950411 (metsotsoana e ngotsoeng pejana) e ntse e lutse ka har'a lesale la ho hlahlobisisa ho disk.


Mokhahlelo oa 2: Ho notlolla FileVault 2 ho tsoa ho terminal ea ho khutlisa ea macOS ha Kena kapa GUI e hloleha

Kena ho ** MacOS Recovery **, bula sebaka se kaholimo sa menyu, ebe o tobetsa ** Lisebelisoa -> Seteishene **.

Mohato oa 1: Tseba Setshelo sa hau sa APFS le Macintosh HD - Data sekhetho sa sesebelisoa

Ka fensetere ea Recovery Terminal, matha:

diskutil apfs list
Sheba sehlahisoa sa sefate bakeng sa molumo o nang le karolo (Data) le FileVault: Yes (Locked):
+-- Container disk3 4A91F802-119B-4C0E-991A-0849182019AA
    ====================================================
    APFS Container Reference:     disk3
    Size (Capacity Ceiling):      994662584320 B (994.7 GB)
    ...
    +-> Volume disk3s5 8810B291-4410-4A11-B812-771928371900
        ---------------------------------------------------
        APFS Volume Disk (Role):   disk3s5 (Data)
        Name:                      Macintosh HD - Data (Case-insensitive)
        Mount Point:               Not Mounted
        FileVault:                 Yes (Locked)
(Litaelong tse ka tlase, fetola disk3s5 ka eng kapa eng diskXsY ID ea hau (Data) lipontšo tsa molumo.)

Mohato oa 2: Hlahloba Basebelisi bohle ba sebetsang ba Cryptographic (Key Wrapping Keys) ho bophahamo ba data

Ho bona ak'haonte e 'ngoe le e' ngoe ea mosebelisi, Key Recovery Key (PRK), kapa senotlolo sa iCloud/Institutional se khonang ho notlolla disk3s5, matha:

diskutil apfs listcryptousers /dev/disk3s5
U tla bona tlhahiso e thathamisa e le 'ngoe kapa ho feta Cryptographic User UUIDs: - Li-UUID tsa Basebelisi ba OpenDirectory ea lehae (Type: Local OpenDirectory User): Ak'haonte e 'ngoe le e' ngoe ea mosebelisi ea macOS e lumelletsoe FileVault. - EBC6C064-0000-11AA-AA11-00306543ECAC (Type: Personal Recovery User): The alphanumeric ea litlhaku tse 24 Senotlolo sa ho Pholisa Motho (XXXX-XXXX-XXXX-XXXX-XXXX-XXXX). - Type: iCloud Recovery User / Institutional Recovery User: Apple ID escrow kapa MDM ea khoebo (Jamf / Kandji / Intune) senotlolo sa escrow.

Mohato oa 3: Notlolla molumo ntle le ho o kenya (-nomount)

Hobaneng o feta -nomount ha o notlolla molumo oa APFS o ka senyehang? Hobane ka ho sa feleng, diskutil apfs unlockVolume hang-hang e leka ho phahamisa molumo ka ** mokhoa oa ho bala-ngola **, e leng se etsang hore ho be le replay e ikemetseng ea ho ngola-koranta kapa ho fanyeha Terminal haeba sefate sa B se senyehile. Ho feta -nomount e manolla senotlolo sa "cryptographic Volume Encryption Key" (VEK) sebakeng se Sireletsehileng ha re ntse re boloka sistimi e sa theohe e le hore re ka e beha ka mokhoa o hlakileng ho bala feela Karolong ea 3:

# Option A: Unlock using your macOS Login Password (try BOTH your current and previous passwords)
diskutil apfs unlockVolume /dev/disk3s5 -nomount

# Option B: Unlock using your 24-Character Personal Recovery Key (PRK) directly in Terminal
diskutil apfs unlockVolume /dev/disk3s5 -passphrase XXXX-XXXX-XXXX-XXXX-XXXX-XXXX -nomount

Warning

Hobaneng diskutil apfs unlockVolume ntle le -nomount e ka fanyeha Terminal sefateng se senyehileng sa APFS B: Neng diskutil apfs unlockVolume e matha ntle le -nomount, macOS e kopa hang-hang mount_apfs ka mokhoa oa ho bala-ho ngola, o hlahisang Mookameli oa Sebaka ka boiketsetso (spaceman) kabo le netefatso ea sefate sa B. Haeba molumo o na le 'Mapa oa Ntho o senyehileng (omap_phys_t) kapa node ea lekhasi e khaotsoeng, khoele ea kernel e ka emisa ka nako e sa lekanyetsoang kapa ea tšoha tikoloho ea Pholiso. Feta kamehla -nomount pele, ebe o nyoloha ka ho hlaka le mount_apfs -o rdonly.

Hata 4: Ho thoe'ng haeba FileVault e notletsoe ka mokhoa o hloekileng 'me tsamaiso ea lifaele ha e senyehe,' me e hanne password ea hau ha u qala?

Haeba diskutil apfs unlockVolume /dev/disk3s5 atleha hang-hang le diskutil apfs verifyVolume /dev/disk3s5 lipontšo The volume Macintosh HD - Data appears to be OK, bothata ba hau e ne e le ** desynchronized Preboot bophahamo** ka mor'a phetoho ea password kapa ntlafatso ea OS. E lokise ka metsotsoana e 5 hore Mac ea hau e tloaelehe hape:

# Mount the unlocked volume and force macOS to rebuild the Preboot login database:
diskutil mount /dev/disk3s5
diskutil apfs updatePreboot /dev/disk3s5
Qala hape Mac (reboot), 'me skrine sa hau sa ho kena se tla amohela phasewete ea hau ha u leka pele.


Mokhahlelo oa 3: Ho pholosa data ha fsck_apfs / Disk Utility First Aid e hloleha (Invalid APFS Superblock kapa Object Map Invalid)

Ho thoe'ng haeba u notlolla disk3s5 mesebetsi (FileVault: Yes (Unlocked)), empa ha u leka ho e beha ka tloaelo, macOS e re com.apple.DiskManagement.disenter error -119930868 / -69845 kapa Disk Utility First Aid litlaleho: - error: omap_phys_t: invalid omap_most_recent_snap - error: nx_superblock_t: checkpoint map invalid - fsroot tree is invalid - File system verify or repair failed. : (-69845)

Latela mehato ena e meraro e ntseng e eketseha ea forensic ho ntša liperesente tse 100 tsa lifaele tsa hau pele u leka ho lokisa lintho tse senyang:

Mokhoa oa 1: Qobella ho phahamisa kernel feela (mount_apfs -o rdonly)

Le ha molumo oa APFS o hana ho nyoloha ka mokhoa oa ho bala-ho ngola (hobane macOS e hana ho kenya molumo o litšila oa APFS ho bala-ngola ha fsck_apfs e fumana ho se lumellane ha sefate se le seng sa B), the apfs.kext hangata mokhanni o tla lumella ** thaba e balang feela (-o rdonly)**:

# 1. Create a temporary mountpoint in the Recovery RAM disk
mkdir -p /Volumes/DataRescue

# 2. Force a read-only mount of the unlocked Data volume
mount_apfs -o rdonly /dev/disk3s5 /Volumes/DataRescue

# 3. Check if your home directory is accessible
ls -la /Volumes/DataRescue/Users/
Haeba ls -la /Volumes/DataRescue/Users/ e thathamisa lebitso la hau la mosebelisi, plug ho USB SSD ea kantle kapa hard drive (e hlophisitsoeng joalo ka APFS kapa ExFAT, e hlahang tlasa /Volumes/MyExternalDrive) 'me u kopitse bukana ea hau ea lapeng hang-hang u sebelisa ditto (e bolokang litšobotsi tse atolositsoeng tsa macOS, lifereko tsa lisebelisoa, le litumello ntle le ho senya lifaele tsa cache tse sa baleheng):
ditto -V /Volumes/DataRescue/Users/yourname /Volumes/MyExternalDrive/Rescued_Mac_Home/

Mokhoa oa 2: Ho thoe'ng haeba sefate sa tsamaiso ea lifaele (fsroot) e senyehile? Mount an internal APFS Local Snapshot (mount_apfs -s)

Sehlomo sa lekunutu sa APFS ho hlaphoheloa hoo esita le litsebi tse ngata tsa Apple Genius Bar li hlokomolohang: Le ha o ne o sena mochini oa hau oa kantle oa Time Machine o kentsoeng kajeno, macOS e iketsetsa ** e sa bonahaleng, e baloang feela. APFS Local Snapshots**(com.apple.TimeMachine.2026-10-31-140512.local kapa com.apple.os.update-...) hona ho SSD ea hau ea ka hare hora e 'ngoe le e 'ngoe le pele ho ntlafatso ea software ea macOS.

Hobane Snapshot ea APFS ke motso oa sefate sa B o hoammeng, o ke keng oa fetoha ka nako.snap_meta_ext_phys_t), leha sistimi ea faele e phela (fsroot) e senyehile nakong ea kotsi metsotso e 10 e fetileng, senepe se nkiloeng hora e 1 e fetileng se na le motso oa sona o ikemetseng, o sa senyehang oa sefate sa B.

  1. Ngola linepe tsohle tsa ka hare tsa APFS tse phelang ho bophahamo ba data bo sa notleloang (disk3s5):
    diskutil apfs listSnapshots /dev/disk3s5
    
    Sheba tlhahiso:
    Snapshot Disk:               disk3s5
    +-- Name: com.apple.TimeMachine.2026-10-31-120015.local
    +-- Name: com.apple.TimeMachine.2026-10-31-130144.local
    +-- Name: com.apple.os.update-MSUPrepareUpdate
    
  2. Kenya senepe sa morao-rao ka kotloloho ho /Volumes/SnapRescue tshebediso mount_apfs -s:
    mkdir -p /Volumes/SnapRescue
    mount_apfs -o rdonly -s com.apple.TimeMachine.2026-10-31-130144.local /dev/disk3s5 /Volumes/SnapRescue
    
  3. Sheba /Volumes/SnapRescue/Users/yourname 'me u kopitse foldara eohle ea hau ho drive ea hau ea kantle ka ditto:
    ditto -V /Volumes/SnapRescue/Users/yourname /Volumes/MyExternalDrive/Rescued_From_Snapshot/
    

Mokhoa oa 3: Ho hlahloba li-Superblocks tsa khale tsa Container Checkpoint (nx_superblock_t) le fsck_apfs

Ho thoe'ng haeba Container eohle ea APFS (/dev/disk0s2 -> disk3) e hana ho hokela, kapa lenane la molumo le linepe li hloleha hobane ** morao-rao Container Superblock (nx_superblock_t)** hloohong ea selikalikoe sa ho hlahloba se tabohile nakong ea tahlehelo ea motlakase ka tšohanyetso?

  1. Qala ka ho etsa netefatso e sa senyeheng ea ho bala feela (-n) karolong ea 'mele ea APFS (/dev/disk0s2) ho bona ID ea transaction (xid) e hlotsoe:
    fsck_apfs -n /dev/disk0s2
    
  2. FEELA KA MOR'A hore u leke Mokhoa oa 1, Mokhoa oa 2, kapa u etse setšoantšo sa karohano (dd ho disk ea kantle ka Mokhoa oa Target Disk / Share Disk), matha fsck_apfs ka mokhoa oa ho sebelisana / lokisa (-y) kapa ka ho hlahloba lintlha tsa khale (-o / -S lifolakha moo li tšehelitsoeng ke Recovery build):
    fsck_apfs -y /dev/disk0s2
    
    Neng fsck_apfs bona hore e ncha ka ho fetisisa nx_superblock_t ka hare ho sebaka sa Checkpoint Descriptor Area ho na le cheke e sa sebetseng ea Fletcher-64 (obj_cksum), e itsamaela e khutlela morao ka har'a ring ring buffer (xp_desc_blocks) ho fumana histori e phahameng ka ho fetisisa e nepahetseng nx_superblock_t (xid - 1), e khutlisa boemo ba setshelo ka metsotsoana e seng mekae, ebe e khutlisetsa ho phahamisa molumo.

Tip

** Mokhoa oa ho etsa setšoantšo kapa ho fihlella SSD ea ka hare ea Mac e sa sebetseng ho tsoa ho Mac ea bobeli (Apple Silicon Share Disk khahlano le Intel Target Disk Mode): Haeba Mac ea hau e sa khone ho phahamisa molumo ho Recovery 'me u batla ho sebelisa lisebelisoa tsa forensic APFS (R-Studio for Mac, UFS Explorer, Disk Drill, kapa apfs-fuse) ho tsoa ho Mac ea bobeli e sebetsang, hokela li-Mac tse peli ka thapo ea Thunderbolt / USB-C: - Ho Intel Mac: Tšoara T e sebetsa ka matla (Target Disk Mode), e pepesang SSD e ka hare e le sesebelisoa se tala sa Thunderbolt block ho Mac ea bobeli. - Ho Apple Silicon Mac (M1/M2/M3/M4): Qala ho kena macOS Recovery, tobetsa ** Utilities -> Share Disk, khetha Macintosh HD, 'me u tobetse Start Sharing (kapa qala ho **DFU / Apple Configurator 2 Khutlisa ** ha feela u se u ntse u boloka data, kaha DFU Restore e hlakola linotlolo tsa SEP).


Mohato oa 4: Ho Lokisa Mochini oa Nako o Senyehileng .sparsebundle ("Time Machine Must Create a New Backup")

Haeba backup ea hau ea Time Machine e lula ho karolo ea netweke ea Synology/QNAP/TrueNAS (SMB) kapa koloi e kantle ka hare ho <MacName>.sparsebundle (kapa .backupbundle) sephutheloana, 'me macOS ea hlaha:

"Time Machine e phethetse netefatso ya bekapo tsa hao ho 'NAS'. Ho ntlafatsa ho tshepeha, Time Machine e tlameha ho etsa bekapo e ntjha bakeng sa hao."

** O SE KE oa tobetsa "Qala Backup e Ncha"** (ho tobetsa konopo eo ho hlakola bekapo ea hau ea lilemo tse ngata .sparsebundle). Sebakeng seo, lokisa sparsebundle sebakeng seo u sebelisa mehato ena e mene ho Mac ea hau:

Karolo ea Sparsebundle Tsela Hare <Name>.sparsebundle/ Se Senyehileng Ka mor'a ho theoha ha Wi-Fi kapa ho Khaotsoa ke Boroko Kamoo re E Lokisang Ka Tlase
Info.plist & Info.bckup MyMac.sparsebundle/Info.plist Time Machine oa ngola <key>VerificationState</key><integer>2</integer> (Ho tšoaea sephutheloana sa "Permanently Bad / Corrupted") kahoo e hana ho leka ho e beha hape. Seta bocha VerificationState ho tloha 2 khutlela ho 0 le ho tlosa RecoveryBackupDeclinedDate.
token & bands/ MyMac.sparsebundle/bands/* macOS e siea sparsebundle sebakeng se "silafetseng / se sebelisoang", kapa se ka hare APFS / HFS+ lethathamo la B-sefate ka hare ho 8 MB band lifaele li na le liphoso tse nyane tsa koranta. Kopanya le hdiutil attach -nomount -readwrite le ho matha fsck_apfs -y (macOS Big Sur +) kapa fsck_hfs -fy (macOS Catalina le ba baholo).

Mohato ka mohato Mochini oa Nako .sparsebundle / .backupbundle pholoso

  1. ** Kenya karolo ea marang-rang (SMB) kapa USB drive ho Finder ** hore o tle o bone YourMac.sparsebundle (mohlala, ho /Volumes/TM_Share/YourMac.sparsebundle).
  2. ** Notlolla ntho efe kapa efe e sa fetoheng uchg lifolakha lihlopheng tsa sparsebundle**: Bula Terminal ho Mac ea hau 'me u fane ka Phihlelo e Felletseng ea Disk ho Terminal (System Settings -> Privacy & Security -> Full Disk Access), ebe o matha:
    sudo chflags -R nouchg "/Volumes/TM_Share/YourMac.sparsebundle"
    
  3. Hokela le .sparsebundle joalo ka disk e tala e ngotsoeng ntle le ho kenya sistimi ea eona e senyehileng (-nomount):
    sudo hdiutil attach -nomount -noverify -noautofsck -readwrite "/Volumes/TM_Share/YourMac.sparsebundle"
    
    Sheba tlhahiso ea terminal ka hloko:
    /dev/disk5              GUID_partition_scheme
    /dev/disk5s1            EFI
    /dev/disk5s2            Apple_APFS                      (or Apple_HFSX on older backups)
    
  4. Sheba hore na bekapo ea hau ea Time Machine ea sebelisa APFS (macOS 11 Big Sur le e ncha) kapa HFS+ (macOS 10.15 Catalina le ho feta), 'me u tsamaise tokiso ea sistimi e tsamaellanang:
  5. Haeba /dev/disk5s2 ho rialo Apple_APFS: Matha diskutil apfs list ho bona referense ea APFS Container e kopaneng bakeng sa disk5s2 (mohlala, Container disk6, Molumo disk6s1), e notlolle haeba e patiloe (diskutil apfs unlockVolume /dev/disk6s1 -nomount), le ho matha fsck_apfs:
    sudo fsck_apfs -y /dev/disk5s2
    
  6. Haeba /dev/disk5s2 ho rialo Apple_HFS kapa Apple_HFSX: Tsamaisa lethathamo la HFS+ sehahi se secha sa lifate tsa B (-drfy e tsosolosa lethathamo la lifate tsa B-fate haeba li tloaelehile -fy hloleha):
    sudo fsck_hfs -fy -c 2g /dev/rdisk5s2
    
  7. ** Hlakola disk e lokisitsoeng hantle **:
    sudo hdiutil detach /dev/disk5
    
  8. ** Hlakola boemo ba "Chefo / netefatso e hlotsoe" (VerificationState = 2) ka hare Info.plist le com.apple.TimeMachine.MachineID.plist**: Esita le ka morao fsck_apfs kapa fsck_hfs e lokisa liperesente tse 100 tsa liphoso tsa sistimi, Time Machine e tla ** ntse ** e hana ho sebelisa bekapo ho fihlela o tlosa folakha ea ho se atlehe eo e ngotseng ho eona. com.apple.TimeMachine.MachineID.plist ka har'a sparsebundle:
    # Back up the plist first
    cp "/Volumes/TM_Share/YourMac.sparsebundle/com.apple.TimeMachine.MachineID.plist" ~/Desktop/MachineID.plist.bak
    
    # Edit the plist using plutil / PlistBuddy to reset VerificationState from 2 to 0
    /usr/libexec/PlistBuddy -c "Set :VerificationState 0" "/Volumes/TM_Share/YourMac.sparsebundle/com.apple.TimeMachine.MachineID.plist"
    /usr/libexec/PlistBuddy -c "Delete :RecoveryBackupDeclinedDate" "/Volumes/TM_Share/YourMac.sparsebundle/com.apple.TimeMachine.MachineID.plist" 2>/dev/null
    
    Joale tlanya **Beka Hona Joale ** ho Mochini oa Nako (kapa bula YourMac.sparsebundle ho Finder ho kopitsa lifaele ka kotloloho): kemiso ea nako eohle ea "backup" ea nalane e hola hantle.

Mohato oa 5: Ho thatafatsa macOS APFS, FileVault, le Mochini oa Nako khahlano le ho koaloa ha nako e tlang

Hang ha data ea hau ea Mac e se e pholositsoe, tlatsa lethathamo lena la mehato e 4 ea thibelo:

  • ** Netefatsa le ho hatisa kopi ea 'mele ea FileVault Personal Recovery Key ea litlhaku tse 24 (fdesetup)**: Ho Mac e sebetsang, netefatsa hore senotlolo sa hau sa FileVault se nepahetse ntle le ho se fetola ka ho matha sudo fdesetup changerecovery -personal (e hlahisang Senotlolo se secha sa ho Pholisa Motho ka litlhaku tse 24 seo u ka se bolokang hang-hang ho molaoli oa hau oa li-password le se sireletsehileng sa mollo).
  • Kamehla boloka bonyane 15% (50 GB ho 100 GB) ea sebaka sa mahala ho disk ea ho qala ea APFS: Ha setshelo sa APFS se tlatsa ho 99% bokhoni pele ho ntjhafatso ea sistimi ea macOS Sonoma/Sequoia, sehlomathi le 'mapa oa APFS Copy-on-Write Object (omap) e ka felloa ke li-blocks tsa mahala bohareng ba ntlafatso, e kenya Mac ka bootloop e sa khoneheng (Error -69845).
  • ** Boloka lipehelo tse peli tse ikemetseng tsa Mochine oa Nako (kapa u kopanye Mochini oa Nako le rsync / Carbon Copy Cloner / bekapo ea Arq)**: Hobane Time Machine e potoloha ka bo eona li-backups libakeng tse ngata tse hlophisitsoeng (e.g., NAS SMB Share + Local USB-C SSD), ho ba le USB-C SSD e khomaretsoeng ka kotloloho ho tiisa hore ha ho mohla u itšetlehileng ka marang-rang feela .sparsebundle e ka senyang haeba Wi-Fi e oela bohareng ba ho ngola.
  • Le ka mohla u se ke ua koala sekoahelo sa MacBook kapa ua hula thapo ea USB-C ha Time Machine e re Cleaning up... kapa Preparing backup...: Karolo eo e nchafatsa APFS senepe sa B-sefate le sparsebundle 'mapa oa sehlopha.

Linomoro tsa libaka tsa tšohanyetso le liprothokholo tsa mekhatlo

Le ha molumo o notletsoeng oa FileVault kapa backup ea Time Machine e senyehileng hangata ke koluoa ​​ea motho kapa ea khoebo ea IT, ho koaloa ha mesebetsi ho amang tlhokomelo ea bongaka, lits'ebeletso tsa tšohanyetso, kapa ts'ireletso ea data e molaong e na le litlhoko tsa ho nyoloha:

  • United States le Canada: Letsetsa 911 haeba ho koaloa ha setsi sa mosebetsi ho ama tlhokomelo ea bakuli ba tliliniki, lisebelisoa tsa tlhahlobo, kapa thomello ea tšohanyetso. Bakeng sa mekhatlo ea tlhokomelo ea bophelo (HIPAA), hlokomela hore ha a ntse a tletse-disk FileVault 2 (AES-XTS-128) e fana ka Safe Harbor khahlanong le ho senoloa ho sa lumelloeng ha laptop e utsuoa, tahlehelo ea ka ho sa feleng ea litlaleho tsa mokuli tse sa tšehetsoeng ke ketsahalo e fumanehang tlas'a Molao oa Tšireletso oa HIPAA (45 CFR § 164.308(a)(7)).
  • United Kingdom: Daela 999 bakeng sa maemo a tšohanyetso a amang polokeho ea bophelo kapa litsamaiso tse matla tsa bongaka tsa NHS. Lekola tahlehelo ea ka ho sa feleng ea data ea hau e sa tšehetsoeng tlasa UK GDPR Article 33 (ICO, 0303 123 1113).
  • European Union: Letsetsa 112 ho phatlalla le linaha tsohle tseo e leng litho tsa EU. Tahlehelo e sa feleng ea ho fumaneha ha data ea motho ka mong kapa ho khaoha ha litšebeletso tsa bohlokoa ho hloka tlhahlobo tlasa GDPR Article 33 (lihora tse 72) le NIS2 (lihora tse 24 bakeng sa mekhatlo e koahetsoeng).
  • Australia le New Zealand: Letsetsa 000 Australia kapa 111 New Zealand bakeng sa karabelo ea tšohanyetso.
  • India le Asia-Pacific: Daela 112 India bakeng sa karabelo ea tšohanyetso; tlaleha tshireletso ya kgwebo kapa diketsahalo tse teng tlasa melaoana e sebetsang ya CERT-In le DPDP Act.

Lipotso tse botsoang khafetsa

Hobaneng ha Mac ea ka e bonts'a meqolo e PEDI ho Disk Utility (Macintosh HD le Macintosh HD - Data), 'me ke hobane'ng ha ho eketsa molumo oa boraro ho ile ha etsahala ka mor'a hore ke khutlisetse macOS?

Ho qala ka macOS Catalina (10.15) le Big Sur (11.0), Apple e arola sistimi ea ts'ebetso hore e bale feela. Bophahamo ba sistimi (`Macintosh HD`) le ho bala-ho ngola Bophahamo ba data (`Macintosh HD - Data`) e kopantsoe hammoho joalo ka **APFS Volume Group** (kahoo Finder e li bonts'a e le drive e le 'ngoe). Haeba motho e mong a kentse macOS bophahamong bo fosahetseng ntle le ho hlakola Sehlopha sa Volume hantle, Disk Utility e etsa kopi. `Macintosh HD - Data - Data` bophahamo ba modumo ha lifaele tsa hau tsa mantlha li ntse li lutse ka har'a tsa khale li sa phahamisoe `Macintosh HD - Data` bophahamo ba modumo. Matha `diskutil apfs list` ho Terminal, kenya li-volumes ka bobeli tsa Data, 'me u hlahlobe `/Volumes//Users/` ho e 'ngoe le e' ngoe ho fumana lifaele tsa hau tsa 'nete.

Ho thoe'ng haeba ke lebetse BOBELI phasewete ea ka ea ho kena ea Mac LE Key ea ka ea FileVault ea litlhaku tse 24, 'me ha kea ka ka lumella iCloud FileVault escrow?

Haeba `FileVault 2` e lumelloa ho Apple Silicon (`M1/M2/M3/M4`) kapa Intel `T2` Mac 'me ha u na phasewete e nepahetseng ea mosebelisi, Senotlolo sa Pholoso ea Motho, escrow ea iCloud Recovery, kapa Senotlolo sa ho Fumana Setsi sa MDM (`Jamf / Intune`), ho ke ke ha khoneha ho hlakola SSD ea ka hare: esita le Apple Engineering kapa lab ea kamore e hloekileng e ka qobella enjene ea AES e kentsoeng ka har'a Hardware ka har'a Secure Enclave (e qobellang ho lieha ha nako pakeng tsa liteko). Leha ho le joalo, pele u inehela, hlahloba libaka tse tharo moo senotlolo sa hau se ka ntseng se le teng: (1) hlahloba hore na ak'haonte e 'ngoe ea mosebelisi e teng ho Mac (`diskutil apfs listcryptousers`); (2) hlahloba hore na Mac ea hau e kile ea ngolisoa ho MDM ea mohiri oa hau (e leng eona e senyang FileVault Recovery Key); kapa (3) sheba li-backups tsa hau tsa iCloud Drive / Linepe / Time Machine.

Hobaneng o entse joalo diskutil apfs unlockVolume hloleha le Error: -69593: Checksum verification failed kapa Invalid password (-69507) ha ke tseba hore password ea ka e nepahetse ka 100%?

Taba ea pele, sheba ** Sebopeho sa Keyboard ** k'honeng e kaholimo ho le letona la skrini sa Pholoso ea macOS: Hangata ho hlaphoheloa ha ho fetohe. `U.S. QWERTY` leha MacBook ea hau e na le UK, Sejeremane (`QWERTZ`), Sefora (`AZERTY`), kapa keyboard ea Dvorak, e bakang matšoao (`@`, `"`, `-`, `_`, `y/z`) ho password ea hau ho ngola litlhaku tse fosahetseng. Ngola phasewete ea hau ka potlako ea taelo ea Terminal pele e le hore u ka bona litlhaku tse hlakileng skrineng, ebe u li kopitsa le ho li beha ka har'a molaetsa oa password.

A na nka khutlisa lifaele tse tlositsoeng ho APFS Mac SSD ke sebelisa PhotoRec kapa Disk Drill haeba ke lahlile Lithōle ka phoso?

Ho Mac efe kapa efe ea sejoale-joale e nang le SSD e kahare, ha faele e hlakoloa 'me Trash e lahleloa (mme che `APFS Local Snapshot` e bua ka li-blocks), macOS hang-hang e romela lisebelisoa **NVMe `Deallocate (TRIM)`** taelo ho molaoli oa SSD, ea emisang li-blocks tse se nang 'mapa ka metsotsoana. Ka hona, **tsela ea hau ea # 1 ea ho hlaphoheloa ka mor'a ho tšolla Lithōle ho Mac HA SE ho betla ho hoholo: hang-hang e ntse e phahamisa `APFS Local Snapshot` (`diskutil apfs listSnapshots /` le `mount_apfs -s`) pele senepe sa hora se potoloha**, joalo ka ha ho hlalositsoe Mokhahlelong oa 3 Mokhoa oa 2 ka holimo.

Ke hobane'ng ha Mac ea ka e ile ea felloa ke sebaka sa disk pele ho ho oa ha ke hlakola 100 GB ea lifaele tsa video metsotso e 10 pejana?

Hobane `APFS` ke Sistimi ea faele ea Kopitsa-on-Ngola, e hlakola a `100 GB` faele ha*** ha e lokolle tseo `100 GB` ea li-disk blocks haeba ka hora **APFS Local Snapshot** (`com.apple.TimeMachine.*.local`) tse nkiloeng pejana kajeno li ntse li supa liboloko tseo (`Purgeable Space`). Haeba Mac ea hau e sa khone ho qalisa kapa ho phethela ntlafatso hobane ho na le linepe `100 GB` ea bokhoba ba sebaka, qala ho Recovery Terminal, notlolla `Macintosh HD - Data`, thathamisa linepe ka `diskutil apfs listSnapshots /dev/disk3s5`, ebe o hlakola senepe sa khale ka ho fetisisa `diskutil apfs deleteSnapshot /dev/disk3s5 -name ` ho lokolla diboloko hanghang.

Ke kopitsa lifaele joang ho Mochini oa Nako o phetseng hantle kapa o lokisitsoeng .sparsebundle ho Windows kapa Linux PC haeba Mac ea ka e shoele ka botlalo?

Mochine oa Nako `.sparsebundle` e mpa e le bukana e nang le makholo a `8 megabyte` chunk file (`bands/0`, `bands/1`, `bands/2`...) tse kopanang hammoho ho theha setšoantšo sa disk se hlakileng. Ho Linux (Ubuntu), o ka kopanya lihlopha tsa sparsebundle ho sesebelisoa se le seng sa block block u sebelisa **`sparsebundlefs`**(`sudo sparsebundlefs /mnt/nas/MyMac.sparsebundle /mnt/virtual_img`), ebe o kenya molumo oa kahare oa APFS o baloang feela o sebelisa **`apfs-fuse`**(`sudo apfs-fuse /mnt/virtual_img/sparsebundle.dmg /mnt/mac_files`) kapa bula `.sparsebundle` ka kotloloho ho ** UFS Explorer ** / ** R-Studio ** ho Windows.


Litataiso tse amanang


Mehloli le tataiso ea semmuso

  • Apple Inc.developer.apple.com): * Apple File System (APFS) Reference: Container Superblock (nx_superblock_t), Checkpoint Descriptor Ring Buffer (xp_desc), 'Mapa oa Ntho (omap_phys_t), le Volume Snapshot Structures*.
  • Tataiso ea Tšireletso ea Platform ea Apple (support.apple.com/guide/security): * FileVault 2 Full-Disk Encryption Architecture, Secure Enclave Key Wrapping (VEK / KEK), le Preboot Volume Synchronization*.
  • Apple macOS Maqephe a Motho: *diskutil(8), fsck_apfs(8), mount_apfs(8), hdiutil(1), le fdesetup(8) Reference Tsamaiso ea Tsamaiso *.
  • Setsi sa Naha sa Maemo le Thekenoloji (NIST) (United States): Phatlalatso e Khethehileng 800-111: Tataiso ea Litheknoloji tsa Polokelo ea Kholiso bakeng sa Lisebelisoa tsa ho qetela.