upvote
Apple has gone through tremendous effort to enable alternative operating systems on Apple Silicon Macs: https://asahilinux.org/docs/platform/open-os-interop/
reply
Are you sure you linked the right page? This looks like a list of workarounds the Asahi team had to figure out.
reply
Oh, my bad, I think the one I intended was this one: https://asahilinux.org/docs/platform/security/#apples-unspok...

> Rumours circulating that Apple are actively hostile towards efforts such as Asahi, or that their security must be bypassed or jailbroken to run untrusted code are unfounded and false. In fact, Apple have expended effort and time on improving their security tooling in ways that only improve the execution of non-macOS binaries. An example of this is giving their Boot Policy configuration tool the ability to wrap raw AArch64 code in a proper Mach-O format starting with macOS 12.1. This is only ever required for enrolling a boot object that is not already a macOS kernelcache.

reply
deleted
reply
Most of those accommodations are for macOS, and make very few (if any) concessions for alternative operating systems. We're talking Qualcomm-tier effort.

Intel and AMD set the standard for "tremendous effort" bringing up support for alternative OSes. Nvidia follows behind, and Apple's support is (somehow) behind Nvidia's foot-dragging.

reply
This is true, although Apple could of just as easily prevented alternative OSes as a whole if they wanted to.
reply
They already have the ability to prevent alternative operating systems. They use the same or similar SoCs in their other product lines and those do not let you do this.

Yes, Apple put effort into making it possible to install alternative operating systems on Macs, but that is an exception to the design because the chips are designed to be locked down. I expect Apple to remove the option at some point because nobody is using it on any of the recent hardware.

reply
Absolutely not. They put in the literal bare minimum possible effort short of locking down the platform entirely.

You get a jmp to some arm64 instructions of your choosing, with a bunch of CPU features locked out.

reply
I will admit I am a bit confused by them locking out features like that, especially since they didn't at first. I wouldn't jump to assuming it's hostile, though.
reply