Can I re-enable SIP after running automate-eGPU / eGPU Enabler
 
Notifications
Clear all

Can I re-enable SIP after running automate-eGPU / eGPU Enabler  

  RSS

bitinn
(@bitinn)
Eminent Member
Joined: 3 years ago
 

So I have bought a Gigabyte AORUS GTX 1070 Gaming Box and am going to try connecting it to my Macbook Pro 2015 13'' (Intel Iris Graphics 6100), I have Thunderbolt line and TB3->TB2 adapter ready.

While the steps I need to perform are pretty clear, I have 2 questions:

- I saw some people say re-enable SIP is possible, while some say otherwise. Is there a definitively answer or is it up to my hardware or OS?

- I also have another iMac (2011, 21.5"), which can work with my Macbook Pro using Target Display Mode; but can I accelerate Target Display Mode using eGPU? Or does eGPU only work with a plain monitor?

Thank you very much.

mid-2012 11" MacBook Air + [email protected] (Aorus Gaming Box via TB3->TB2 adapter) + macOS10.12

 
2015 13" MacBook Pro [5th,2C,U] + GTX 1070 @ 16Gbps-TB2>TB3 (AORUS Gaming Box) + macOS 10.13 [build link]  


ReplyQuote
itsage
(@itsage)
Illustrious Member Admin
Joined: 4 years ago
 

You can try re-enabling SIP while leaving kext verification disabled.

 

csrutil enable --without kext

external graphics card builds
best laptops for external GPU
eGPU enclosure buyer's guide

 
2020 13" MacBook Pro [10th,4C,G] + RX 5700 @ 32Gbps-TB3 (Prototype eGPU Enclosure) + macOS 10.15.4 & Win10 1903 [build link]  


ReplyQuote
bitinn
(@bitinn)
Eminent Member
Joined: 3 years ago
 
Posted by: itsage

You can try re-enabling SIP while leaving kext verification disabled.

 

csrutil enable --without kext

Actually, I manage to enable SIP using csrutil enable without using the exception.

And the idea behind it is that once the kext has been flushed onto kernel cache, it should stay there.

Obviously I still need to figure out when kernel cache might be flushed again and breaks eGPU support, but simple restart/shutdown doesn't seem to trigger it.

(Also it looks like Apple will allow some custom kext in High Sierra, so the hope is one day we won't be doing the SIP trick anymore.)

mid-2012 11" MacBook Air + [email protected] (Aorus Gaming Box via TB3->TB2 adapter) + macOS10.12

 
2015 13" MacBook Pro [5th,2C,U] + GTX 1070 @ 16Gbps-TB2>TB3 (AORUS Gaming Box) + macOS 10.13 [build link]  


goalque liked
ReplyQuote
goalque
(@goalque)
Noble Member Admin
Joined: 3 years ago
 

Thanks for letting know of this. The latest script version creates a new kernel cache ID and you can actually fully enable the SIP on macOS 10.12.6. It does allow Nvidia kext loading even though "sudo kextutil -print-diagnostics -b com.nvidia.NVDAStartupWeb" says about code signing failure and that untrusted kexts are not allowed.

In some earlier macOS versions, it worked only once but now seems to work across multiple shutdowns and restarts. Until you rebuild caches again.

However, Apple still clearly states that unsigned kext won't load and so says the Terminal. The latest script cache rebuilding mechanism is quite effective, or Apple has added an exception rule for the script Smile

automate-eGPU EFIapple_set_os.efi

Mid 2015 15-inch MacBook Pro eGPU Master Thread

 
2018 13" MacBook Pro [8th,4C,U] + Radeon VII @ 32Gbps-TB3 (ASUS XG Station Pro) + Win10 1809 [build link]  


slhdsnet liked
ReplyQuote