This is an annexe to the macUP macOS setup process that offers:
- generic tips for smooth running
- and help for troubleshooting
see also:
- shortcuts.md
- keyboard quick combos
- iOS_Apple_iPad_iPhone_reset.md
- how to wipe iOS devices (often need a Mac connected!)
- disks_and_data
- useful tips on storing and arringing your information on disk storage drives
You may also want to record details of specific cases or issues that occur, along with any Private Configuration Notes you hold.
A little history lesson on macOS…
- Originally derived from BSD
- A lot of the UI components came forward from the NeXTSTEP platform, and you'll still see NSxxxx under the covers (NSDockTile, NSServices, etc)
- Darwin is the open-source OS core, but other key components that make up macOS are closed
- Like Cocoa OO-API and Aqua GUI
- Darwin is also the root of iOS, watchOS etc
Before reinstalling (especially if you are transferring ownership) you might like to
- Turn off Find My Mac (as well as disassociate your AppleID)
- Consider erasing the NVRAM
- There could be a firmware password to unlock this https://support.apple.com/en-gb/HT204455
- This might also disable Find My Mac
- see https://support.apple.com/en-gb/HT204063
- Erase the Mac HD (System) and Data volumes https://support.apple.com/en-gb/HT208496
Your options now include:
- Use Command-R at power on to boot into MacOS recovery.
- This will reinstall with the most recently installed version.
- Option-Command-R will allow you to use Internet Recovery
- which will try to install the latest version.
- See How to reinstall macOS from macOS Recovery or About macOS Recovery
So a TOTAL WIPE, where you will DESTROY ALL DATA, and reinstall of a device might be
- remove FindMyMac and Sign Out of Applle ID
- Shutdown
- Power and and Hold Opt-Cmd-R-P
- Wait 20 secs for second light up of display then release
- Shutdown
- Power on and Hold Opt-Cmd-R
- Enter your wifi PSK
- Wait a few minutes for latest installer
- Language
- when you see macOS Utilities
- Disk Utility
- select Macintosh HD
- Erase
- Accept proposed filesystem
- as its likely to be the most suited to your circumtance
- if you wish you can choose
with Encryptionnow instead of waiting to turn FileVault on later
- Repeat for any other disks present
- Quit Disk Utility
- Reinstall macOS
- Choose Macintosh HD and continue
- Leave it running until the Welcome Screen
- with the annoying voice where you should NOT press Esc
- If you want to put the installation on hold (e.g. to pass it over to its new owner)
- Press Cmd-Q to Shutdown cleanly
If you have no recovery partition left on your machine, and the internet is not available, then you will need:
- a bootable installer
- recommended as a 8GB or larger USB (-C?) flash drive
# find the exact command to use
ls /Applications/Install\ macOS*/Contents/Resources/cre*
# now append the options
# --volume /Volumes/uXX_MediaName
- may need to enter your password
- no need to install xcode if prompted
- Use Option ⌥ at boot to select boot device
If you want your Mac to keep running when you put down the lid, you could plug in a display, install a special piece of software like caffeine, or simply use the built in command:
# Display global power settings:
pmset -g
# To stop sleep entirely:
sudo pmset -a disablesleep 1
# To revert, allowing sleep again:
sudo pmset -a disablesleep 0
# credit https://apple.stackexchange.com/a/361398
Remember to allow sleep again before you unplug and put your mac into a backpack, else it might get rather toasty!
# Make sure it’s not still running
ps -a | grep -i firefox
# remove semaphore
cd ~/Library/Application\ Support/Firefox/Profiles/
$ ls -l
# if you have multiple profiles, list the one with the most recent date
$ cd rAnd0m.default
$ ls -la
# remove the hidden parentlock file
$ rm -v .parentlock
# credit https://apple.stackexchange.com/a/238169
Note that this article is primarily written from a viewpoint that uses a Mac as the only Apple device, and therefore eschews the majority of the 'Apple-for-everything' ecosystem. If you have the whole range of Apple products, tied into a single AppleID, some of this might seem pointless to your approach to computing.
There are some things where you're very limited as to how you control payments and subscription, almost obliged to dedicate a macOS or iOS device to an AppleID in order to do these...
- Change iCloud Storage subscription level
- can do on macOS, iOS, or iCloud for Windows
- can't do via browser
- see https://support.apple.com/en-gb/HT201318
- Change payment methods
- using macOS or iOS https://support.apple.com/en-gb/HT201266
- using Apple Apps: iTunes for Windows or Apple Music for Chromebook/Android https://support.apple.com/en-gb/HT210755
- I couldn't manage via tv.apple.com in browser
- Other things you can't change without a payment method set up
See the section Cached Keychain (consider renaming) below to 'home' multiple AppleIDs on a single device.
If you use the default iCloud Drive settings, it will back up the following folders:
-
Documents
-
Desktop
-
Downloads
-
To change this, choose System Preferences / AppleID / iCloud
-
Next to iCloud Drive click Options
-
you can deselect Desktop and Documents Folders
- but as at April 2021 you cannot yet deselect a specific folder (e.g. Downloads)
Even if you have not set Photos to sync from iCloud to your device (Settings and Preferences / AppleID / iCloud / left Photos unticked) then you can still allow the Photos client app to control Shared Albums.
- Photos / Preferences / iCloud / tick Shared Albums
- this will place a tick in the main AppleID / Photos line
- but selecting it in Photos stops it from also selecting the options: iCloud Photos and Photo Stream
The macOS keychain is where passwords are stored, for Safari browser and other apps. You can access its contents through, the following - the first two are essentially the same management interface, which also supports Two Factor Authentication (2FA) and the third is a more technical way to view and edit contents.
- Safari / Preferences / Passwords
- Preferences / System / Passwords
- Keychain Access.app in the launchpad Utilities folder
The latter shows you, and allows you to search within, the individual encrypted keychain files such as:
- iCloud - synced between your devices
- System - wifi networks and system roots
- login - automatically unlocked by user logon
Items within the keychains include types:
- passwords - also synced to iOS devices
- Secure Notes - macos only manual entries
- Certificates and Keys - for asynchronously encrypted services
Individual iCloud items can be shared from iOS via AirDrop. For instance if you wish to share a single set of login credentials use Preferences / Passwords / Share / AirDrop. If however you wish to share a copy of the entire keychain it is usually more complex.
(consider renaming section)
As a simpler workaround, consider adding a new macOS user, and signing into AppleID. That way you get to choose which iCloud feature data is cached into the local folders, including of course the Keychain. The keychain should be encrypted using the principle device passcode for that account, but do consider ensuring the using FileVault full disk encryption on the drive holding the cache.
Holding a device signed into that account also confers the other privileges, such as allowing other sign-ins to be trusted, so protect the device and local account well.
For more keep reading.
- System Settings / Users & Groups
- Add User (then you may need to authenticate yourself)
- leave it set as standard user
- set the account name and password
- Log on as the user
- set Accessibility and Privacy as you prefer
- do NOT use AppleID just yet, Skip For Now
- Skip through most of the rest
- then set just the basic services below.
If you only want to use your AppleID to enable basic services like App Store, manage your iCloud subscription, or Find My Mac:
- System Settings / Sign in with your AppleID / iCloud / Start using iCloud
- enter your AppleID and password
- use a Trusted Device to get your user verification code, if requested
- Accept the Terms of Service
- you will probably have to enter your local user password too
- so that it may also unlock your iCloud keychains
- If you have changed your local password
- you may need to enter the old password,
- as it unlocked your iCloud keychain
- You will want to be quite quick to disable the rest
- before they all sync down to your device
- System Settings / AppleID / iCloud / Apps using iCloud
- UNcheck ALL iCloud options (including ‘Show More Apps’) except:
- Keychain
- (optionally) FindMy
- you will also need to enable Location Services if you want to locate as well as be able to wipe
- Enable Location Services
- you may leave most apps turned off
- after System Services, click details
- UNcheck all except Find My Mac and Networking & Wireless
- Enable Location Services
- you will also need to enable Location Services if you want to locate as well as be able to wipe
- unless there are other specific services you wish to retain on this device
Review the devices that are now tied to this account, and take especial note of those that are Apple devices. Check the details against this newly set up device, to ensure it mentions This device is trusted and can receive AppleID verification codes.
You may, if you wish, also set up Safari on this user account to have access to iCloud via the web, but you can do that anytime you need it.
When signing in with an AppleID account that has two-factor authentication (2FA, MFA) enabled, you will also need a six-digit verification code. As explained in https://support.apple.com/en-ca/HT204974 the limitation is that Trusted Devices can only be items running Apple 'OS' variants, like Macs, iPads etc.
This is another reason why you might need to keep extra local users authenticated with any 'legacy' AppleIDs that still hold some data or services. As you decommission legacy devices, ensure that you are tracking which are still Trusted Devices for the relevant six-digit user verification codes.
The Photos app, introduced on OS X Yosemite 10.10, replaced iPhoto and Aperture apps, that have not been supported since macOS Mojave 10.14. On iOS devices, the similarly branded Photos app replaced the Camera Roll app/
The Memories feature (formerly 'Moment') on the Photos app can be used to categorise by metadata
The Photos app, and other related app components like the Media Browser, rely on the System Photo Library being configured e.g. Photos / Preferences / General.
By default, in your user folder, the Pictures / Photos Library contains your local library for the Photos app. You can export the entire thing by copying the folder using Finder. If you only want to export a portion: within the Photos app, select the photos/albums you want then File / Export / choose destination / Export Originals.
Before you start making changes to Photos Libraries and their locations locally, see below to turn off iCloud Photo moving Libraries.
If you launch Photos app whilst holding Option button, you will be prompted for a new Photos Library location. Note that Photos Library folders on macOS have the .photoslibrary filename extension. The Option on startup will also allow you to create an additional local Photos Library, allowing you to have multiple locations (including external drives). credit https://www.makeuseof.com/how-to-move-photos-library-to-external-drive-on-mac/
If you have Multiple Photo Libraries, only the one that you have nominated as the System Photo Library (Photos / Preferences / General) can connect with iCloud features.
The iCloud Photo Library is the portion of your photos that are stored within the iCloud paid (if above 5GB) subscription. The photos stored on your device locally can be a subset of these, with the 'Optimise Storage' feature: Photos / Preferences / iCloud / Optimise.
Alternatively, if you want to store all the images locally, for instance is you want to back them up, then use: Photos / Preferences / iCloud / Download Originals.
You can use Shared Albums for photo sharing, to allow other iCloud users to view photos in your iCloud Library: Photos / Preferences / iCloud / Shared Albums – this turns on photo sharing.
You can also create a private iCloud.com website for those without iCloud accounts.
The System Photo Library (nominated via Photos / Preferences / General) is the one that connects with iCloud features. This is only relevant if you have Multiple Photo Libraries, otherwise the default system library is connected automatically.
When you import items, they will only sync with iCloud (if it is your System Photo Library and) if you check the Copy items to the Photo Library.
Disconnecting iCloud when moving a library on your local device (ref https://www.imore.com/how-use-photos-mac-external-hard-drive or https://www.macworld.co.uk/how-to/move-photos-hard-drive-3681943/ )
The processes involved in the synchronisation are cloudd that directs cloudphotod to fetch the content and photolibraryd that organises it on arrival.
Fixed Disk size is supposed to improve performance - does SSD underneath change that?
Check also Power Management settings - and what should they be in the guest?
Do you want to set up Macos as a guest OS (e.g. for a development or build environment) - it's not supported by VirtualBox but it IS within the terms of your Apple software license. See https://forums.virtualbox.org/viewforum.php?f=22
Troubleshooting hangs
- Look in Activity Monitor to understand what is occurring
- Check VBox.log file (Logs folder under where VM definition and vdi files are
- Some candidate settings - enable 2/3d video acceleration, modify or disable audio,
OpenGL Warning: blit from texture to texture not implemented
ERROR [COM]: aRC=E_ACCESSDENIED (0x80070005) aIID={872da645-4a9b-1727-bee2-5585105b9eed}
aComponent={ConsoleWrap} aText={The object is not ready}, preserve=false aResultDetail=0
GUI: Passing request to close Runtime UI from machine-logic to UI session.
ERROR [COM]: aRC=E_ACCESSDENIED (0x80070005) aIID={872da645-4a9b-1727-bee2-5585105b9eed} aComponent={ConsoleWrap} aText={The object is not ready}, preserve=false aResultDetail=0
Check the Console in Launchpad / Other
From Terminal run sudo sysdiagnose
Some people recommend independent open source diagnostic tool EtreCheck http://etrecheck.com
Apple's antimalware XProtectService is built into macOS, but other than File Quarentine, there is no obvious interface. It runs when supporting software (such as the major browsers) download files, and is updated with new signature definitions as long as App Store Updates allow Install system data files and security updates.
When you first try to execute a downloaded file you get a warning
This application was downloaded from the Internet
Are you sure you want to open it
If the XProtect matched it to a file Apple marked as malware it will
be far more direct in warning you, and it will name the offending malware.
It is therefore more like Windows SmartScreen than Defender –
You need third party software for features like advanced heueristic detection, periodic scans of your disk, protection from bundled adware.
Opinions differ on whether XProtect alone is enough –
depending on how vicariously you surf, click, download, and install,
you may or may not wish to add some extra paid protection.
If you want a 'jack'-style audio router to send sounds between one app and another, look at BlackHole (which stepped in since SoundFlower was abandoned)
If you want to diagnose which application is the
sound source program that is currently sending audio,
like EarTrumpet on Windows,
consider the advanced volume controller app BackgroundMusic
(brew install --cask background-music).
to prepare the audio track see Lubuild / films-and-songs.md#normalise-peak-amplitude
- save your audio.wav as 16-bit 44,100Hz
- Open Music (iTunes)
- Create a new playlist called CD
- Drop the wav file onto the Playlist
- Menu / File / Burn Playlist to Disc
- Audio CD
- Burn
- Wait a couple of minutes for it to finish
- Eject the CD and test out the disc in an ordinary player
According to this Apple Music guide CDs you create with Music (iTunes) will play in normal CD players, but DVDs will only play in computers. If you want a non-data DVD, one that will play in a regular DVD player, then you could try one of these open-source programs available via homebrew:
- burn
- simple, old favourite
- not updated since 2010 (but still in use)
- dvdstyler
- mature, cross-platform, in c++ with wxWidgets
- last mac build 2019, although X+Win updated 2021
- includes menu creation features
You can use VLC to find the temporary download URL if your media originates from YouTube, Vimeo, etc. See https://github.com/artmg/lubuild/blob/master/help/manipulate/films-and-songs.md#online-video-caching DVD uses 576i resolution, so it's not worth going for higher than 720p downloads.
The video be automatically converted by the burning program to use the MPEG-2 encoding at the correct resolution and framerate for the DVD standard, put you might need to choose PAL format for Europe.
If you want to know what accessories have been plugged in via USB
ioreg -p IOUSB -w0- add
-lto see loads of detail
- add
system_profiler SPUSBDataType- equivalent of the "System Information" UI app
- manual GUI: menu bar Apple button / About this Mac / System Report
If you want to know which process is using (locking) a given file, or preventing a volume from being dismounted, you can show it/them using the list open files (lsof) command...
# basic list in process order
sudo lsof
# just containing keyword
sudo lsof | grep myFileContains
# specific file or volume
sudo lsof /Volumes/MyDiskUnit
# any file in a folder or subfolder
sudo lsof +D /path/to/folderSee what apps and executables launch automatically on startup.
- Per-user apps
- System Prefs / Users & Groups / select user / Login Items
- Finder / Go / Library / Launch Agents
- though this is not always the safest place to remove things
- System-wide
- via Finder:
- /Library/StartupItems
- /Library/LaunchDaemons
- /Library/LaunchDaemons
- The /System versions of these are unlikely to have any user-changeable apps
- via Finder:
Although this is a diagnostic way to identify apps, deleting items here is not a reliable method to start them from starting up. Consider uninstalling components you no longer require, or look in the startup options inside the application's Preferences menu.
May apps' preferences can be found inthe plist files in $HOME/Library/Preferences
For the commands see:
- to convert binary property lists into XML and back
- more in depth manipulation
You may have a favourite Linux application that uses the GTK widget framework for its graphical interface (GUI). If so then the GTK Quartz integration will make it relatively straight-forward to make an app work with the Quartz graphical layer in macOS.
- seg fault 11
- install
- brew install valgrind
- macos 10.14 version not currently supported
- brew install --HEAD https://raw.githubusercontent.com/sowson/valgrind/master/valgrind.rb
2020-03-10 15-51-23.411 [Notice] (playerCallback) No chunk received for 5000ms. Closing Audio Queue.
AddressSanitizer:DEADLYSIGNAL
=================================================================
==27258==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000018 (pc 0x00010084c155 bp 0x700009584b30 sp 0x700009584600 T2)
==27258==The signal is caused by a WRITE memory access.
==27258==Hint: address points to the zero page.
#0 0x10084c154 (snapclient:x86_64+0x100118154)
#1 0x10084a7ea (snapclient:x86_64+0x1001167ea)
#2 0x10080c6f5 in void* std::__1::__thread_proxy<std::__1::tuple<std::__1::unique_ptr<std::__1::__thread_struct, std::__1::default_delete<std::__1::__thread_struct> >, void (Player::*)(), Player*> >(void*) (snapclient:x86_64+0x1000d86f5)
#3 0x7fff68dd22ea in _pthread_body (libsystem_pthread.dylib:x86_64+0x32ea)
#4 0x7fff68dd5248 in _pthread_start (libsystem_pthread.dylib:x86_64+0x6248)
#5 0x7fff68dd140c in thread_start (libsystem_pthread.dylib:x86_64+0x240c)
==27258==Register values:
rax = 0x00000000000044e8 rbx = 0x00007000095849e0 rcx = 0x0000100000000000 rdx = 0x0000000000000008
rdi = 0x0000000000000018 rsi = 0x0000100000000000 rbp = 0x0000700009584b30 rsp = 0x0000700009584600
r8 = 0x000060f000007840 r9 = 0x0000700009584801 r10 = 0x000000000000007d r11 = 0x0000000000000002
r12 = 0x0000700009584600 r13 = 0x00001e00012b08ce r14 = 0x0000700009584828 r15 = 0x00001e00012b08c0
AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV (snapclient:x86_64+0x100118154)
Thread T2 created by T1 here:
#0 0x1009d102d in wrap_pthread_create (libclang_rt.asan_osx_dynamic.dylib:x86_64h+0x5402d)
#1 0x10080c54e (snapclient:x86_64+0x1000d854e)
#2 0x100808a86 (snapclient:x86_64+0x1000d4a86)
#3 0x1008251d6 (snapclient:x86_64+0x1000f11d6)
#4 0x1007cd40a (snapclient:x86_64+0x10009940a)
#5 0x1007ce25b (snapclient:x86_64+0x10009a25b)
#6 0x100801505 in void* std::__1::__thread_proxy<std::__1::tuple<std::__1::unique_ptr<std::__1::__thread_struct, std::__1::default_delete<std::__1::__thread_struct> >, void (ClientConnection::*)(), ClientConnection*> >(void*) (snapclient:x86_64+0x1000cd505)
#7 0x7fff68dd22ea in _pthread_body (libsystem_pthread.dylib:x86_64+0x32ea)
#8 0x7fff68dd5248 in _pthread_start (libsystem_pthread.dylib:x86_64+0x6248)
#9 0x7fff68dd140c in thread_start (libsystem_pthread.dylib:x86_64+0x240c)
Thread T1 created by T0 here:
#0 0x1009d102d in wrap_pthread_create (libclang_rt.asan_osx_dynamic.dylib:x86_64h+0x5402d)
#1 0x10080135e (snapclient:x86_64+0x1000cd35e)
#2 0x1007c2f69 (snapclient:x86_64+0x10008ef69)
#3 0x10082a8da (snapclient:x86_64+0x1000f68da)
#4 0x100747764 (snapclient:x86_64+0x100013764)
#5 0x7fff68bde3d4 in start (libdyld.dylib:x86_64+0x163d4)
==27258==ABORTING
Abort trap: 6
- valgrind --leak-check=yes /usr/local/bin/snapclient
- valgrind --leak-check=yes --main-stacksize=8388608 /usr/local/bin/snapclient
- valgrind --leak-check=yes --main-stacksize=134217728 /usr/local/bin/snapclient
==26740== Process terminating with default action of signal 11 (SIGSEGV)
==26740== Access not within mapped region at address 0x18
==26740== at 0x10133E808: _pthread_wqthread_setup (in /usr/lib/system/libsystem_pthread.dylib)
==26740== by 0x10133E497: _pthread_wqthread (in /usr/lib/system/libsystem_pthread.dylib)
==26740== by 0x10133E3FC: start_wqthread (in /usr/lib/system/libsystem_pthread.dylib)
==26740== If you believe this happened as a result of a stack
==26740== overflow in your program's main thread (unlikely but
==26740== possible), you can try to increase the size of the
==26740== main thread stack using the --main-stacksize= flag.
==26740== The main thread stack size used in this run was 8388608.
valgrind: m_scheduler/scheduler.c:1028 (void run_thread_for_a_while(HWord *, Int *, ThreadId, HWord, Bool)): Assertion 'VG_(in_generated_code) == False' failed.
host stacktrace:
==26740== at 0x258041E10: ???
==26740== by 0x258042186: ???
==26740== by 0x258042166: ???
==26740== by 0x2580B8D47: ???
==26740== by 0x2580B6E61: ???
==26740== by 0x2580C81C7: ???
==26740== by 0x2580C8484: ???
sched status:
running_tid=5
Thread 1: status = VgTs_WaitSys syscall unix:305 (lwpid 771)
==26740== at 0x1012EB866: __psynch_cvwait (in /usr/lib/system/libsystem_kernel.dylib)
==26740== by 0x10134256D: _pthread_cond_wait (in /usr/lib/system/libsystem_pthread.dylib)
==26740== by 0x100E3AB30: std::__1::condition_variable::__do_timed_wait(std::__1::unique_lock<std::__1::mutex>&, std::__1::chrono::time_point<std::__1::chrono::system_clock, std::__1::chrono::duration<long long, std::__1::ratio<1l, 1000000000l> > >) (in /usr/lib/libc++.1.dylib)
==26740== by 0x100020504: ??? (in /usr/local/bin/snapclient)
==26740== by 0x100020427: ??? (in /usr/local/bin/snapclient)
==26740== by 0x10002C96A: ??? (in /usr/local/bin/snapclient)
==26740== by 0x10002C451: ??? (in /usr/local/bin/snapclient)
==26740== by 0x1000462B5: void* std::__1::__thread_proxy<std::__1::tuple<std::__1::unique_ptr<std::__1::__thread_struct, std::__1::default_delete<std::__1::__thread_struct> >, void (Player::*)(), Player*> >(void*) (in /usr/local/bin/snapclient)
==26740== by 0x1000060E6: ??? (in /usr/local/bin/snapclient)
==26740== by 0x1010543D4: start (in /usr/lib/system/libdyld.dylib)
client stack range: [0x104149000 0x104948FFF] client SP: 0x104947C48
valgrind stack range: [0x7000009B2000 0x700000AB1FFF] top usage: 9768 of 1048576
Thread 4: status = VgTs_Yielding (lwpid 9731)
==26740== at 0x10133E808: _pthread_wqthread_setup (in /usr/lib/system/libsystem_pthread.dylib)
==26740== by 0x10133E497: _pthread_wqthread (in /usr/lib/system/libsystem_pthread.dylib)
==26740== by 0x10133E3FC: start_wqthread (in /usr/lib/system/libsystem_pthread.dylib)
client stack range: ??????? client SP: 0x700003C79F80
valgrind stack range: [0x700003F4A000 0x700004049FFF] top usage: 3808 of 1048576
Thread 5: status = VgTs_Runnable (lwpid 9475)
==26740== at 0x10133E3F0: start_wqthread (in /usr/lib/system/libsystem_pthread.dylib)
client stack range: ??????? client SP: 0x700003F45B80
valgrind stack range: [0x70000404E000 0x70000414DFFF] top usage: 8720 of 1048576
Note: see also the FAQ in the source distribution. It contains workarounds to several common problems. In particular, if Valgrind aborted or crashed after identifying problems in your program, there's a good chance that fixing those problems will prevent Valgrind aborting or crashing, especially if it happened in m_mallocfree.c.
If that doesn't help, please report this bug to: www.valgrind.org
In the bug report, send all the above text, the valgrind version, and what OS and version you are using. Thanks.