mirror of
https://github.com/sickcodes/Docker-OSX.git
synced 2024-11-26 20:17:01 +08:00
fbb186968f
## What? I've added a script on how to automatic boot vnc-version container in `README.md` file for better usablility. For more background, see ticket #83 . ## Why? Because the script provided in the readme file didn't work on vnc-version container. ## How? ## Testing? No automated tests, take my word for it ;) ## Screenshots Before  After ## Anything Else? Nope
405 lines
10 KiB
Markdown
405 lines
10 KiB
Markdown
# Docker-OSX
|
|
## [Follow @sickcodes on Twitter](https://twitter.com/sickcodes)
|
|
|
|
### V2.6
|
|
# Features In Docker-OSX v2.6
|
|
- CI/CD weaponization thru vnc and xdotool
|
|
- OSX-KVM
|
|
- X11 Forwarding
|
|
- SSH on localhost:50922
|
|
- QEMU
|
|
- VNC on localhost:8888 [vnc version is inside a separate directory](https://github.com/sickcodes/Docker-OSX/blob/master/vnc-version/Dockerfile)
|
|
- Create an ARMY using `docker commit`
|
|
- XFVB HEADLESS (use vnc)
|
|
|
|
### Pull Requests Welcome!
|
|
|
|
|
|
|
|
Run Mac in a Docker container! Run near native OSX-KVM in Docker! X11 Forwarding!
|
|
|
|
Author: Sick.Codes https://sick.codes/ & https://twitter.com/sickcodes
|
|
|
|
PR & Contributor Credits: https://github.com/sickcodes/Docker-OSX/blob/master/CREDITS.md
|
|
|
|
Upstream: https://github.com/kholia/OSX-KVM && the great guy [@kholia](https://twitter.com/kholia)
|
|
|
|
Upstream Credits (OSX-KVM project) among many others: https://github.com/kholia/OSX-KVM/blob/master/CREDITS.md
|
|
|
|
Docker Hub: https://hub.docker.com/r/sickcodes/docker-osx
|
|
|
|
### Other cool Docker-QEMU based projects:
|
|
|
|
[Run iOS in a Docker with Docker-eyeOS](https://github.com/sickcodes/Docker-eyeOS) - [https://github.com/sickcodes/Docker-eyeOS](https://github.com/sickcodes/Docker-eyeOS)
|
|
|
|
# Run Docker-OSX
|
|
|
|
```bash
|
|
|
|
docker pull sickcodes/docker-osx:latest
|
|
|
|
docker run \
|
|
--device /dev/kvm \
|
|
--device /dev/snd \
|
|
-v /tmp/.X11-unix:/tmp/.X11-unix \
|
|
-e "DISPLAY=${DISPLAY:-:0.0}" \
|
|
sickcodes/docker-osx:latest
|
|
|
|
# press ctrl G if your mouse gets stuck
|
|
|
|
# scroll down to troubleshooting if you have problems
|
|
|
|
# need more RAM and SSH on localhost -p 50922?
|
|
|
|
```
|
|
|
|
# Run but allow SSH into OSX!
|
|
|
|
```bash
|
|
docker run \
|
|
--device /dev/kvm \
|
|
--device /dev/snd \
|
|
-e RAM=4 \
|
|
-p 50922:10022 \
|
|
-v /tmp/.X11-unix:/tmp/.X11-unix \
|
|
-e "DISPLAY=${DISPLAY:-:0.0}" \
|
|
sickcodes/docker-osx:latest
|
|
|
|
# turn on SSH after you've installed OSX in the "Sharing" settings.
|
|
ssh fullname@localhost -p 50922
|
|
|
|
```
|
|
|
|
# Autoboot into OSX after you've installed everything
|
|
|
|
```bash
|
|
# find you containerID
|
|
docker ps
|
|
|
|
# move the no picker script on top of the Launch script
|
|
# NEW CONTAINERS
|
|
docker exec containerID mv ./Launch-nopicker.sh ./Launch.sh
|
|
|
|
# VNC-VERSION-CONTAINER
|
|
docker exec containerID mv ./Launch-nopicker.sh ./Launch_custom.sh
|
|
|
|
# LEGACY CONTAINERS
|
|
docker exec containerID bash -c "grep -v InstallMedia ./Launch.sh > ./Launch-nopicker.sh
|
|
chmod +x ./Launch-nopicker.sh
|
|
sed -i -e s/OpenCore\.qcow2/OpenCore\-nopicker\.qcow2/ ./Launch-nopicker.sh
|
|
"
|
|
```
|
|
|
|
# Requirements: KVM on the host
|
|
Need to turn on hardware virtualization in your BIOS, very easy to do.
|
|
|
|
Then have QEMU on the host if you haven't already
|
|
|
|
```bash
|
|
# ARCH
|
|
sudo pacman -S qemu libvirt dnsmasq virt-manager bridge-utils flex bison iptables-nft edk2-ovmf
|
|
|
|
# UBUNTU DEBIAN
|
|
sudo apt install qemu qemu-kvm libvirt-clients libvirt-daemon-system bridge-utils virt-manager
|
|
|
|
# CENTOS RHEL FEDORA
|
|
sudo yum install libvirt qemu-kvm
|
|
|
|
# then run
|
|
sudo systemctl enable libvirtd.service
|
|
sudo systemctl enable virtlogd.service
|
|
|
|
sudo modprobe kvm
|
|
|
|
# reboot
|
|
```
|
|
|
|
# Start the same container later (persistent disk)
|
|
|
|
This is for when you want to run the SAME container again later.
|
|
|
|
If you don't run this you will have a new image every time.
|
|
|
|
```bash
|
|
# look at your recent containers and copy the CONTAINER ID
|
|
docker ps --all
|
|
|
|
# docker start the container ID
|
|
docker start abc123xyz567
|
|
|
|
# if you have many containers, you can try automate it with filters like this
|
|
# docker ps --all --filter "ancestor=sickcodes/docker-osx"
|
|
# for locally tagged/built containers
|
|
# docker ps --all --filter "ancestor=docker-osx"
|
|
|
|
```
|
|
|
|
# Additional Boot Instructions
|
|
|
|
- Boot the macOS Base System
|
|
|
|
- Click `Disk Utility`
|
|
|
|
- Erase the BIGGEST disk (around 200gb default), DO NOT MODIFY THE SMALLER DISKS.
|
|
-- if you can't click `erase`, you may need to reduce the disk size by 1kb
|
|
|
|
- (optional) Create a partition using the unused space to house the OS and your files if you want to limit the capacity. (For Xcode 12 partition at least 60gb.)
|
|
|
|
- Click `Reinstall macOS`
|
|
|
|
|
|
## Creating images:
|
|
```bash
|
|
# You can create an image of an already configured and setup container.
|
|
# This allows you to effectively duplicate a system.
|
|
# To do this, run the following commands
|
|
|
|
# make note of your container id
|
|
docker ps --all
|
|
docker commit containerid newImageName
|
|
|
|
# To run this image do the following
|
|
docker run \
|
|
--device /dev/kvm \
|
|
--device /dev/snd \
|
|
-v /tmp/.X11-unix:/tmp/.X11-unix \
|
|
newImageName
|
|
```
|
|
|
|
# Troubleshooting
|
|
|
|
libgtk permissions denied error, thanks @raoulh + @arsham
|
|
```bash
|
|
echo $DISPLAY
|
|
|
|
# ARCH
|
|
sudo pacman -S xorg-xhost
|
|
|
|
# UBUNTU DEBIAN
|
|
sudo apt install x11-xserver-utils
|
|
|
|
# CENTOS RHEL FEDORA
|
|
sudo yum install xorg-x11-server-utils
|
|
|
|
# then run
|
|
xhost +
|
|
|
|
```
|
|
|
|
PulseAudio for sound (note neither [AppleALC](https://github.com/acidanthera/AppleALC) and varying [`alcid`](https://dortania.github.io/OpenCore-Post-Install/universal/audio.html) or [VoodooHDA-OC](https://github.com/chris1111/VoodooHDA-OC) have [codec support](https://osy.gitbook.io/hac-mini-guide/details/hda-fix#hda-codec) though [IORegistryExplorer](https://github.com/vulgo/IORegistryExplorer) does show the controller component working):
|
|
|
|
```bash
|
|
docker run \
|
|
--device /dev/kvm \
|
|
-e AUDIO_DRIVER=pa,server=unix:/tmp/pulseaudio.socket \
|
|
-v "/run/user/$(id -u)/pulse/native:/tmp/pulseaudio.socket" \
|
|
-v /tmp/.X11-unix:/tmp/.X11-unix \
|
|
sickcodes/docker-osx
|
|
```
|
|
|
|
PulseAudio debugging:
|
|
```bash
|
|
docker run \
|
|
--device /dev/kvm \
|
|
-e AUDIO_DRIVER=pa,server=unix:/tmp/pulseaudio.socket \
|
|
-v "/run/user/$(id -u)/pulse/native:/tmp/pulseaudio.socket" \
|
|
-v /tmp/.X11-unix:/tmp/.X11-unix \
|
|
-e PULSE_SERVER=unix:/tmp/pulseaudio.socket \
|
|
sickcodes/docker-osx pactl list
|
|
```
|
|
|
|
Alternative run, thanks @roryrjb
|
|
|
|
```bash
|
|
docker run \
|
|
--privileged \
|
|
--net host \
|
|
--cap-add=ALL \
|
|
-v /tmp/.X11-unix:/tmp/.X11-unix \
|
|
-v /dev:/dev \
|
|
-v /lib/modules:/lib/modules \
|
|
sickcodes/docker-osx
|
|
```
|
|
|
|
Check if your hardware virt is on
|
|
|
|
```bash
|
|
egrep -c '(svm|vmx)' /proc/cpuinfo
|
|
```
|
|
|
|
Try adding yourself to the docker group
|
|
|
|
```bash
|
|
sudo usermod -aG docker "${USER}"
|
|
```
|
|
|
|
Turn on docker daemon
|
|
|
|
```bash
|
|
# run ad hoc
|
|
sudo dockerd
|
|
|
|
# or daemonize it
|
|
sudo nohup dockerd &
|
|
|
|
# or enable it in systemd
|
|
sudo systemctl enable docker
|
|
```
|
|
|
|
# How to Enable Network Forwarding
|
|
|
|
Allow ipv4 forwarding for bridged networking connections:
|
|
|
|
This is not required for LOCAL installations and may cause containers behind [VPN's to leak host IP](https://sick.codes/cve-2020-15590/).
|
|
|
|
If you are connecting to a REMOTE Docker-OSX, e.g. a "Mac Mini" in a datacenter, then this may boost networking:
|
|
|
|
```bash
|
|
# enable for current session
|
|
sudo sysctl -w net.ipv4.ip_forward=1
|
|
|
|
# OR
|
|
# sudo tee /proc/sys/net/ipv4/ip_forward <<< 1
|
|
|
|
# enable permanently
|
|
sudo touch /etc/sysctl.conf
|
|
sudo tee -a /etc/sysctl.conf <<EOF
|
|
net.ipv4.ip_forward = 1
|
|
EOF
|
|
|
|
# OR edit manually
|
|
nano /etc/sysctl.conf || vi /etc/sysctl.conf || vim /etc/sysctl.conf
|
|
|
|
# now reboot
|
|
```
|
|
|
|
# How to install Docker if you don't have Docker already
|
|
|
|
```bash
|
|
### Arch
|
|
sudo pacman -S docker
|
|
sudo groupadd docker
|
|
sudo usermod -aG docker "${USER}"
|
|
|
|
### Ubuntu
|
|
|
|
sudo apt remove docker docker-engine docker.io containerd runc -y
|
|
sudo apt install apt-transport-https ca-certificates curl gnupg-agent software-properties-common -y
|
|
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | apt-key add -
|
|
apt-key fingerprint 0EBFCD88
|
|
sudo add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable"
|
|
sudo apt update -y
|
|
sudo apt install docker-ce docker-ce-cli containerd.io -y
|
|
sudo groupadd docker
|
|
sudo usermod -aG docker "${USER}"
|
|
|
|
|
|
```
|
|
|
|
### Fedora: if you have no internet connectivity from the VM, and you are using bridge networking:
|
|
|
|
```bash
|
|
# Set the docker0 bridge to the trusted zone
|
|
sudo firewall-cmd --permanent --zone=trusted --add-interface=docker0
|
|
sudo firewall-cmd --reload
|
|
```
|
|
|
|
# Backup the disk (Where's my disk?)
|
|
|
|
You can use `docker cp`
|
|
|
|
```bash
|
|
# docker copy your image OUT of your container (warning, double disk space)
|
|
docker cp oldcontainerid:/home/arch/OSX-KVM/mac_hdd_ng.img .
|
|
```
|
|
|
|
Or if you lost your container, find it with this:
|
|
|
|
```bash
|
|
# fast way
|
|
sudo find /var/lib/docker -size +10G | grep mac_hdd_ng.img
|
|
|
|
# you can move (mv) it somewhere
|
|
sudo mv somedir/mac_hdd_ng.img .
|
|
|
|
# start a new container
|
|
# get the new container id
|
|
docker ps
|
|
|
|
# docker cp INTO new container
|
|
docker cp ./mac_hdd_ng.img newcontainerid:/home/arch/OSX-KVM/mac_hdd_ng.img
|
|
|
|
```
|
|
|
|
# DESTROY: Wipe old images
|
|
|
|
This is useful for getting disk space back.
|
|
|
|
It will delete your old (and new) docker containers.
|
|
|
|
```bash
|
|
# WARNING deletes all old images, but saves disk space if you make too many containers
|
|
# The following command will make your containers RIP
|
|
docker system prune --all
|
|
docker image prune --all
|
|
```
|
|
|
|
# INSTANT OSX-KVM in a BOX!
|
|
This Dockerfile automates the installation of OSX-KVM inside a docker container.
|
|
|
|
It will build a Catalina Disk with up to 200GB of space.
|
|
|
|
You can change the size and version using build arguments (see below).
|
|
|
|
This file builds on top of the work done by Dhiru Kholia and many others on the OSX-KVM project.
|
|
|
|
|
|
# Custom Build
|
|
```bash
|
|
docker build -t docker-osx:latest \
|
|
--build-arg VERSION=10.14.6 \
|
|
--build-arg SIZE=200G
|
|
```
|
|
|
|
```bash
|
|
docker run \
|
|
-e RAM=4 \
|
|
-e SMP=4 \
|
|
-e CORES=4 \
|
|
-e EXTRA='-usb -device usb-host,hostbus=1,hostaddr=8' \
|
|
-e INTERNAL_SSH_PORT=23 \
|
|
--device /dev/kvm --device /dev/snd -v /tmp/.X11-unix:/tmp/.X11-unix docker-osx:latest
|
|
|
|
```
|
|
|
|
## What is `${DISPLAY:-:0.0}`?
|
|
|
|
`$DISPLAY` is the shell variable that refers to your X11 display server.
|
|
|
|
`${DISPLAY}` is the same, but allows you to join variables like this:
|
|
|
|
- e.g. `${DISPLAY}_${DISPLAY}` would print `:0.0_:0.0`
|
|
- e.g. `$DISPLAY_$DISPLAY` would print `:0.0`
|
|
|
|
...because `$DISPLAY_` is not `$DISPLAY`
|
|
|
|
`${variable:-fallback}` allows you to set a "fallback" variable to be substituted if `$variable` is not set.
|
|
|
|
You can also use `${variable:=fallback}` to set that variable (in your current terminal).
|
|
|
|
In Docker-OSX, we assume, `:0.0` is your default `$DISPLAY` variable.
|
|
|
|
You can see what yours is
|
|
```bash
|
|
echo $DISPLAY
|
|
```
|
|
Hence, `${DISPLAY:-:0.0}` will use whatever variable your X11 server has set for you, else `:0.0`
|
|
|
|
|
|
## Todo:
|
|
```
|
|
- GPU Acceleration (Hackintosh? Passthru bus id of cards? AMD Vega? Nvidia-SMI?)
|
|
- Virt-manager
|
|
|
|
```
|