62 comments

[ 2.3 ms ] story [ 55.4 ms ] thread
If you don't like the conclusion, and you have an M1 or M2, see also https://alx.sh

Asahi's not perfect, but there's no restrictions. You bought the computer, after all.

I've never personally understood the point of macOS for power users (other than cases where you're required to use one e.g. for work). I can understand it for casual users who just want something simple that works for basic tasks, but what does macOS offer a power user that Linux doesn't, and which makes it worth sacrificing the ability to run your machine the way you want? In Linux you'd solve OP's problem by just building up from a minimal distro like Arch or NixOS.
> I've never personally understood the point of macOS for power users

I am not sure how much I qualify, but here is my use case: it can run Photoshop and MS Office, it has Keynote, it can compile just about any software I use or I develop for my job (mostly Physics and computational Chemistry stuff). It has a sane command line. Honestly, it just works for more than simple tasks. The things for which it does not work is games (but that has nothing to do with the merits of the OS) and yes, customisation.

The alternatives are Windows (which I also use for other tasks), which is a nightmare to deal with and requires tons of faffing about to compile codes, and Linux (which is actually what I use most), which does not have a working Office and is very janky.

That is not even considering the fact that MacBooks are the best laptops by a mile (my Mac is a desktop, so it's not relevant to me).

> which makes it worth sacrificing the ability to run your machine the way you want?

I do run my Linux box like I want. I spent hours upon ours ricing it up and fine tuning everything I cared about. Stuff still occasionally breaks after a minor update and I regularly have to roll back because of a misbehaving NVIDIA driver (at least once a year). On my Mac, I don't need to tweak every aspect of KDE because the default is fine. I don't need to be able to change pid1 because launchd is fine (but nowadays so is systemd). I don't need to install drivers because everything that does not work out of the box can be tweaked with SteerMouse and Karabiner (honestly, I would kill to have something that works that well on Linux). The couple of utilities I use are much, much better than the Linux alternatives and break much less often. So in effect I don't sacrifice much, and the tradeoff is very good.

I won't even consider Windows. It's as customisable as macOS, but its default behaviour is terrible so here the tradeoff is absolutely not worth it.

I don't like the direction Apple is currently taking, so I will re-evaluate in the future, but for now my Mac is the most pleasant to use of my current computers.

> In Linux you'd solve OP's problem by just building up from a minimal distro like Arch or NixOS.

And then spending a week to make it work, and then spending hours at unpredictable times when an update breaks something. I know, I already do it on my Linux box. It has some good aspects, but also some bad ones, which is why I use a Mac at home.

"Power Users", whatever that might really mean use MacOS because it works. They use a Mac laptop because it always and instantly wakes from sleep. Because the audio always works, and is always low latency. Because they have work to do, and the OS is extremely reliable. Also because it is light, and the battery lasts for a very long time indeed.

My laptop has been up for 43 days, not very long in a server world, but excellent for a personal device that I use for development, hardware design and audio production. The last time it restarted was probably for an OS upgrade, but I can't recall.

My work linux laptop is also pretty reliable, but this is only because I never upgrade anything on it and only use it for development. Its battery life is terrible, so I only use it plugged into the wall. My work linux desktop has issues with bluetooth audio and graphics, neither of which I can be bothered to fix.

I don't see why a power user would trust a desktop Linux distro. They are so unprofessional and take 0 accountability for breaking your system. As a power users I need to actually use my computer and not spend all day trying to fix my OS. Fixing the OS should be the vendor's responsibility. Not mine.
Out of the box, macOS is substantially more secure than any common linux OS.
it depends on whether you're a power user in terms of getting lots of actual work done, or you're a power user (and this seems much more common) in the sense that you spend lots of time tweaking your productivity setup.
I'm a power user. I do FreeBSD kernel performance work for Netflix.

I have a macbook as my work laptop. I use it as a dumb terminal to my FreeBSD desktop, a platform for corp. video conferencing, and to surf the web. Any actual work happens on my desktop (Unless I'm working on something arm64 specific, and am using a VM on the laptop ... but then I'm probably ssh'ed in from my desktop.

Why the macbook? I have never gotten along with Windows (have tried on a few separate occasions). And I'm too lazy to put effort into getting Linux running well on a laptop, since that would still be just a dumb terminal for FreeBSD dev. And I'm not enough of a masochist to run FreeBSD on a laptop. So the macbook is the path of least resistance. It works well as a laptop (suspend / resume, connects to random wifi) and comes with a terminal and ssh client that require zero effort to get working.

You appear to have forgotten the state of linux until fairly recently. For literal decades, MacOS "just worked" and it meant that the user did not have to fight their OS to get shit done.

In the professional world where "I did not get any work done today because an update fucked my wifi card" is not a valid excuse, MacOS (and Windows to a lesser degree) triumphed. Large orgs who can afford a whole IT department might be fine deploying linux on their fleet of desktops, but there is always a tremendous amount of testing and validation behind the scenes to ensure that everything "just works". This just was not the case for the indy professional, or small tech startup.

Now, in the past 5 or so years two things happened: 1) linux reached a state where a "normie developer" could take a chance and install it on a work machine and be just fine, and 2) MacOS has regressed enough where OS updates are risky now, and the "it just works" slogan does not really apply any more.

> what does macOS offer a power user that Linux doesn't ?

Photoshop, illustrator, Final Cut Pro, motion and more.

When I want I open terminal and can do anything I would ever want to do in Linux.

I’ve never spent one second of my life dealing with drivers or recompiling shit or version or so conflicts on a Mac.

Literally hundreds of hours of that on windows and Linux.

(comment deleted)
I used Linux exclusively for 13 years. Moved to Mac because I wanted a laptop that could give me 10+ hours of battery backup.
I can understand it for casual users who just want something simple that works for basic tasks, but what does macOS offer a power user that Linux doesn't, and which makes it worth sacrificing the ability to run your machine the way you want?

I consider myself a power user. What I don't consider myself is a "configuration hobbyist" which some people seem to conflate with power users. I use my Mac to get all kinds of work done. I write shell scripts and I have tons of 3rd party command line tools and open source software that I've installed via Homebrew. What I don't have is a customized desktop environment with power meter widgets and stock tickers in the menu bar and anime girl desktop backgrounds.

I used Linux for 10 years and I got tired of updates breaking things and having to edit configuration files just to get the system back to "normal." The Mac just gives me "normal" and loads of productivity (as well as battery life) out of the box, and it doesn't compromise on the command line power that I want.

> I've never personally understood the point of macOS for power users

We are all users of power, electrical power specifically. And macOS, running on modern Mac hardware, is very power efficient.

(Yes it’s a dumb pun, but it also points to one reason that sophisticated users still choose macOS.)

I have a life and plan to live it, not spend all day configuring my computer to do basic things that macOS does perfectly.

"I've never personally understood" seems to be a lack of imagination.

Working hardware that I can buy at Media Market ready to go with an operating system that isn't stuck in the 1970's mindset, where people still think TUIs are "modern".
> To the Unix purist, this might appear wasteful and unnecessary, but macOS isn’t, and never has been, Unix.

I get what they mean, but macOS is even Unix certified. https://www.opengroup.org/openbrand/register/

> macOS isn’t, and never has been, Unix.

MacOS is the most UNIXy of the UNIXes

1. Comparatively heavyweight

2. Proprietary

3. UNIX APIs

It's such a shame that we have come to this. MacOS is basically Windows now. :(
I don't understand why Apple doesn't offer a headless MacOS or at least a path to a minimal install. Those mac minis make a great little server box but losing 8GB to hundreds of processes, before you've done anything, just feels wasteful and inelegant.
What sort of applications would benefit from MacOS instead of Linux as a headless server OS?
What would you use it for? To run Docker containers that rely on a Linux VM anyway?
Can speak for someone who managed a racked [1] Mac Mini racked as a server in 2015~2018:

* Profile Manager / MDM * Caching server for OS updates * Thunderbolt connection to a PCIe RAID HBA for a JBOD for NAS file sharing

All these things/use cases now are depreciated, MDM via JAMF in the cloud, internet is fast enough that caching OS updates isn't necessary, and NAS's are much better suited.

[1] https://www.sonnettech.com/product/legacyproducts/xmacminise...

I thought a minimal darwin distro exists, giving you headless macos?
I badly need slimmed down macOS for CI VMs. Yeah, some little things can be cut out but most of the time not.

On the other hand, macOS is not that much memory-hungry as one might think. Like, a 4GB VM can start and build software.

(comment deleted)
For those wanting some semblance of control over macOS system processes, consider experimenting with App Tamer ( https://stclairsoft.com/AppTamer/ ). I was sceptical about it but "rogue" system processes, like Spotlight Indexer / Engine, that randomly demanded and hogged 100% of the CPU is now a thing of the past for me, after I used App Tamer to set it to not use more than 20% of CPU resources. It can supposedly stop (kill?) processes too, and I am experimenting with that too. But yeah, I think it's time to dump macOS (thankfully, I am still using an older version so my experience is less shitty).
Misleading title, should be “you can’t”
Instead of forcing iOS onto laptops, they locked down MacOS.
Having trouble understanding how this discussion, and TFA don't mention:

https://www.puredarwin.org/

which would be where I'd go if total control of the OS on Apple hardware was wanted.

> Here’s our first problem, as those are located in the Signed System Volume (SSV), so we can’t change them in any way. The same applies to the other 417 LaunchDaemons and 460 LaunchAgents that account for most of the processes listed by Activity Monitor. In the days before the SSV it was possible to edit their property lists to prevent them from being launched, but that isn’t possible any more when running modern macOS.

SSV can be disabled. It would be ill-advised to do so, but Apple intentionally allows you to do that. In fact you can strip away every single security layer of macOS, including allowing unsigned kernel extensions to be loaded. This document is a bit outdated, but it should still be possible to do all of that. https://gist.github.com/macshome/15f995a4e849acd75caf14f2e50...

Feels like the article is just a cheap dunk on macOS. Has Apple perhaps baked in a bit too much into the SSV? Definitely. Even the Chess.app is in there.

Does it really matter? Almost certainly no.

Disabling SSV puts your system security on par with any stock linux distro. Most OSes don’t do a cryptographically verified read only root.
I suspect that Oakley could have explained that, but the thesis stands even without the asterisk, and explaining it would have an issue:

This is going to piss off some Linux folks, but when communicating from a big pulpit about how to bypass parts of MacOS, it's important to be aware that the vast majority of MacOS users are casual, nontechnical users. As such, a popular blog posting "here's how to bypass SIP/SSV lock/whatever" would lead to a wave of users disabling it for less-than-great reasons (aesthetics, conviction that e.g. a given service was causing their system slowness when that service's resource usage was actually symptomatic of something else orchestrated by MacOS going wrong). Those decisions have side effects:

- Folks brick or break their computers, potentially in a way that voids the warranty or support contracts (I hope that software bypasses don't trigger this, but I am cynical).

- Folks chasing a "cleanliness vibe" leave a lot of the system security off once they're done. Someone else in this thread pointed out that without SSV the security of MacOS is on par with most Linux, but MacOS users are a lot bigger attack risk than Linux users: there are more of them, they're wealthier and thus identified as targets of choice by malware/people, and, again--they're casual users and don't have good security spider sense. This isn't a blanket endorsement of every restriction/security feature with no opt-out that MacOS has, just an observation that its userbase is at higher risk for attack than some others--lower than windows, but higher than Linux users.

- Folks induce breakage that bricks their computers on a delay, e.g. during the next system update something chokes after encountering a totally unauthorized/unexpected service geometry and crashes hard enough to cause data loss.

I'm not saying that stuff like SSV-rw should be secret, just that it's probably for the best to not discuss it front and center in a widely-read informational blog whose content is geared towards (power) users rather than technicians. To phrase it with a different example: if someone Googles "how to disable XProtect (antimalware)", great, go nuts. But it's probably for the best that a popular article about "can you reduce resource usage by shutting down system launchd services" doesn't have a "here's how to elevate your permissions and disable whatever you like" blurb, and instead settles for an answer of "no, that's not supported."

Does it really matter? Almost certainly no.

...until they start including things you don't want (remember the CSAM scanning debacle?)

The problem is that Oakley is actually wrong. You don't need to edit the property lists. You can simply use the launchctl command-line tool to disable system launchd services after you disable SIP, without having to disable the SSV.
> Has Apple perhaps baked in a bit too much into the SSV? Definitely. Even the Chess.app is in there. > Does it really matter? Almost certainly no.

Why does waste and broken customization not matter?

Don’t read the comments. Author responds like a tool.
(comment deleted)
Our machines all have CPUs that can execute on the order of 10^9 instructions every second. Why waste time worrying about a few hundred processes that use next to no CPU time?
Found the Electron apps vibe coder.
I'm not sure who the author is, but the fact they choose to be stymied by SSV (which can be disabled) to avoid investigation down that path, which is similar to the path enthusiasts do with Windows to build tools like Tiny11, NTLite, and distributions like Atlas, feels intellectually lazy. Asserting that macOS is not UNIX (it is, quite literally, including the most recent release Tahoe) and then arguing with folks who corrected them in the comments, makes me think the author wasn't really interested in answering the question they put forth and instead were trying to mystify readers to shut down exploration and curiosity.

It is entirely possible to gain an understanding of those processes running on your computing system and to decide which process you don't want to run at startup, this is regardless of the desires and intents of the maker of the computing system, as long as you retain control of the hardware. Many of the Windows optimization tools at various points even involved community made binary patching. There's no basis to claim that it's not possible to understand or take actions, it's just that the Mac community has a different set of priorities and focus areas than other computing communities, so nobody in the community has yet invested the effort to do so.

You could summarize this blog post as answering "No" to the question in its title, without actually exploring the question to determine if that's a true answer. It's not a true answer, and won't be until we completely lose control over our own hardware.

I have often considered making a set of scripts to do just exactly this (after disabling the SSV so that the system can be modified).

It would be no less secure than any modern or common linux OS, which do not use a read only signed root.

It would be nice to be able remove some or all of the iOS bloatware apps but you have to disable system protection and they will just reappear on the next macOS update. They really need something similar to the "Windows Components" screen that lets you check or uncheck things that are bundled in the windows install.
There's a lot of chatter here about macOS' Unix certification. But in a post shared by another user, it appears that the actual content of that Unix certification vindicates OP— macOS' official Unix compatibility requires disabling SIP:

> So, if you want your installation of macOS 15.0 to pass the UNIX® 03 certification test suites, you need to disable System Integrity Protection, enable the root account, enable core file generation, disable timeout coalescing, mount any APFS partitions with the strictatime option, format your APFS partitions case-sensitive (by default, APFS is case-insensitive, so you’ll need to reinstall), disable Spotlight, copy the binaries uucp, uuname, uustat, and uux from /usr/bin to /usr/local/bin and the binaries uucico and uuxqt from /usr/sbin to /usr/local/bin, set the setuid bit on all of these binaries, add /usr/local/bin to your PATH before /usr/bin and /usr/sbin, enable the uucp service, and handle the mystery issues listed in the four Temporary Waivers.

https://www.osnews.com/story/141633/apples-macos-unix-certif...

So it seems very fair to say then, that features like SIP and the SSV are genuine turns away from Unix per se, even given the fact of the certification.

It's pretty telling when the comments on the article and here have devolved into pedantic discussions of "well is it REALLY UNIX?" It's the most inconsequential question with no beneficiary except those who want to claim UNIX purity.
You also need to change the /bin/sh symlink (to the included /bin/dash) to avoid multiple bugs in their ancient bash 3.2 showing in POSIX scripts.
Well, one of the "nice" things about classic mac OS, was that you could write an app that could register with the system, to receive every user event (like keypresses and mouse movements). We used to make fun extensions, with this...

I'm sure that couldn't ever be abused...

The new UNIX-based OS may have its warts, but it is just a bit more secure.

I love how we want to trim macOS down. I totally get it. I open Activity Monitor and think, "WTF?" At the same time, my current job requires I use a Windows laptop, and I have to admit, "Wow, we have it pretty good over here..."

Not saying this isn't a valiant effort, but I kind of feel like Mac users are stretched out on a lounge chair at the beach complaining the Bloody Mary could be a touch more spicy.

Was really hoping this would be an article on the OS file size. /system using 80GB on a 250gb drive is crazy. Don't get me started on the state of library directories and app bloat.
I think for many the key driver behind wanting to slim down the OS isn’t RAM or CPU use. It’s wanting to control their experience of using the computer. If the OS didn’t feel bloated nobody would care if there were 1000 processes that occasionally woke up briefly.

So what makes the OS feel bloated? It’s stuff you don’t need or want pushing its way into the foreground so you can’t ignore it. Notifications and popups are a huge culprit. Best most anxiety reducing thing I did yesterday was turn off pointless notifications like Music showing the name of the new song it’s playing. And used Little Snitch to make sure I’m never getting an update downloaded or nagged about ever again.

Several years ago I remember making something that could be considered a custom "distro" of macOS that would be VM-oriented and as minimal as it could be for CI purposes, by starting with the recovery/installer partition and adding what I needed while deleting what I didn't. Not surprisingly, there was next-to-no precedent of such that I could find, and my biggest source of information was the Hackintosh community. Nonetheless it was not too difficult, if tedious, to do so, and the final disk image size I arrived at was less than 1GB. In general the macOS community is, to put it bluntly, mostly computer-illiterate non-power-users who will either advocate against you or otherwise have no idea what you're talking about. In contrast there's a HUGE amount of existing information on modding Windows, and of course Linux sits at the other extreme.
It's sad to see apple go from customer experience first to investor satisfaction first. There is a lot of pressure on iOS26 and Tahoe being bloated and slow with planned obsolescence clearly taking centre stage.

People can hope that apple takes their operating systems as seriously as their ARM chips, but it doesn't seem likely. A cycle of 'performance and bug fixes year' will happen which gives them an excuse to bloat further operating systems that are in the pipeline. This is the worst part. We will fix now to show you we can do it and then bloat it in subsequent years so that you upgrade your devices.