Sitemap
Every page on Mac Internals.
Home
Articles
- Boot ROM and Secure Boot on Apple Silicon: from power-on to iBoot
- Gatekeeper: what it actually does and how to read its decisions
- How a USB device gets driven on macOS
- Time Machine on APFS: snapshots, network backups, and rollback
- AOP and the secondary coprocessors on Apple Silicon
- Kernel synchronization in XNU: locks, atomics, and lock-free patterns
- What happens when you launch an app on macOS
- The XNU network stack: mbufs, TCP, and Skywalk
- The Apple GPU and Metal driver: unified memory in practice
- Code signing chain of trust: from binary to Apple's root
- Kernel memory allocators in XNU: zalloc, kalloc, slab
- The Secure Enclave: SEPOS, mailbox protocol, what the SEP actually does
- APFS encryption: FileVault, per-file keys, and the SEP's role
- Inside the APFS object map: how the filesystem b-tree works
- Interrupt handling in IOKit: from device IRQ to driver callback
- Power management on macOS: IOPM, idle states, and wake from sleep
- Memory pressure on macOS: compressor, jetsam, and the working set
- mmap on XNU: what really happens when you map a file
- Page tables on Apple Silicon: ASIDs, translation regimes, and APRR in detail
- Sandbox profiles: SBPL and kernel evaluation
- A context switch in XNU, walked end to end
- How fork(), exec(), and posix_spawn work on XNU
- How macOS boots: iBoot to launchd
- Mach IPC internals: kmsg, mqueue, vouchers
- APFS clones and snapshots: the kernel calls that make them work
- The Apple GPU command pipeline: Metal to silicon
- Apple Silicon and XNU: APRR, unified memory, AMX, Rosetta 2
- Power management on Apple Silicon: pmgr, DVFS, and idle clusters
- DriverKit: how Apple is moving every driver out of the kernel
- dyld in depth: chained fixups, prebuilt loaders, and dlopen internals
- The dyld shared cache and shared regions
- IOSurface in depth: zero-copy between every coprocessor
- Kernel debugging on macOS: KDP, panics, and lldb-kdp
- libdispatch internals: how GCD actually dispatches your blocks
- macOS security architecture: signing, sandbox, SIP, TCC
- Signals in XNU: where POSIX semantics meet Mach reality
- TCP internals on XNU: the state machine, congestion control, and the receive path
- The XNU scheduler: bands, QoS, and how Mach decides who runs
- Inside APFS: copy-on-write, snapshots, and the sealed system volume
- IOKit and the driver model: how a Mac talks to its hardware
- Mach ports: how every macOS process actually talks to another
- The BSD personality: how XNU pretends to be Unix
- Virtual memory in XNU: pmap, the VM map, and the compressor