qemu-system-aarch64: Could not load data from file '(null)'

[MannixGu]

Run

Full Run Stack

qemu-system-aarch64: info: Loading iOS 14.0...
qemu-system-aarch64: info: Kernel virtual low: 0xfffffff004000000
qemu-system-aarch64: info: Kernel virtual high: 0xfffffff00a4cd4f0
qemu-system-aarch64: GLib: g_file_get_contents: assertion 'filename != NULL' failed
qemu-system-aarch64: Could not load data from file '(null)'

Boot CMD

#!/bin/bash

qemu-system-aarch64 -s -cpu apple-a13-cpu  -M t8030 \
 -kernel kernelcache.research.iphone12b \
 -dtb Firmware/all_flash/DeviceTree.n104ap.im4p \
 -append "debug=0x14e kextlog=0xffff serial=3 -v wdt=-1" \
 -initrd 038-44135-124.dmg \
 -cpu max -smp 4 \
 -m 4G -serial mon:stdio \
 -drive file=nvme.1,format=raw,if=none,id=drive.1 \
 -device nvme-ns,drive=drive.1,bus=nvme-bus.0,nsid=1,nstype=1,logical_block_size=4096,physical_block_size=4096 \
 -drive file=nvme.2,format=raw,if=none,id=drive.2 \
 -device nvme-ns,drive=drive.2,bus=nvme-bus.0,nsid=2,nstype=2,logical_block_size=4096,physical_block_size=4096 \
 -drive file=nvme.3,format=raw,if=none,id=drive.3 \
 -device nvme-ns,drive=drive.3,bus=nvme-bus.0,nsid=3,nstype=3,logical_block_size=4096,physical_block_size=4096 \
 -drive file=nvme.4,format=raw,if=none,id=drive.4 \
 -device nvme-ns,drive=drive.4,bus=nvme-bus.0,nsid=4,nstype=4,logical_block_size=4096,physical_block_size=4096 \
 -drive file=nvram,if=none,format=raw,id=nvram \
 -device apple-nvram,drive=nvram,bus=nvme-bus.0,nsid=5,nstype=5,id=nvram,logical_block_size=4096,physical_block_size=4096 \
 -drive file=nvme.6,format=raw,if=none,id=drive.6 \
 -device nvme-ns,drive=drive.6,bus=nvme-bus.0,nsid=6,nstype=6,logical_block_size=4096,physical_block_size=4096 \
 -drive file=nvme.7,format=raw,if=none,id=drive.7 \
 -device nvme-ns,drive=drive.7,bus=nvme-bus.0,nsid=7,nstype=8,logical_block_size=4096,physical_block_size=4096 \
 -monitor telnet:127.0.0.1:1235,server,nowait

replace with this

qemu-system-aarch64 -s -cpu apple-a13-cpu  -M t8030,trustcache=Firmware/038-44135-124.dmg.trustcache,ticket=root_ticket.der \
-kernel kernelcache.research.iphone12b \
-dtb Firmware/all_flash/DeviceTree.n104ap.im4p \
-append "debug=0x14e kextlog=0xffff serial=3 -v wdt=-1" \
-initrd 038-44135-124.dmg \
-cpu max -smp 4 \
-m 4G -serial mon:stdio \
-drive file=nvme.1,format=raw,if=none,id=drive.1 \
-device nvme-ns,drive=drive.1,bus=nvme-bus.0,nsid=1,nstype=1,logical_block_size=4096,physical_block_size=4096 \
-drive file=nvme.2,format=raw,if=none,id=drive.2 \
-device nvme-ns,drive=drive.2,bus=nvme-bus.0,nsid=2,nstype=2,logical_block_size=4096,physical_block_size=4096 \
-drive file=nvme.3,format=raw,if=none,id=drive.3 \
-device nvme-ns,drive=drive.3,bus=nvme-bus.0,nsid=3,nstype=3,logical_block_size=4096,physical_block_size=4096 \
-drive file=nvme.4,format=raw,if=none,id=drive.4 \
-device nvme-ns,drive=drive.4,bus=nvme-bus.0,nsid=4,nstype=4,logical_block_size=4096,physical_block_size=4096 \
-drive file=nvram,if=none,format=raw,id=nvram \
-device apple-nvram,drive=nvram,bus=nvme-bus.0,nsid=5,nstype=5,id=nvram,logical_block_size=4096,physical_block_size=4096 \
-drive file=nvme.6,format=raw,if=none,id=drive.6 \
-device nvme-ns,drive=drive.6,bus=nvme-bus.0,nsid=6,nstype=6,logical_block_size=4096,physical_block_size=4096 \
-drive file=nvme.7,format=raw,if=none,id=drive.7 \
-device nvme-ns,drive=drive.7,bus=nvme-bus.0,nsid=7,nstype=8,logical_block_size=4096,physical_block_size=4096 \
-monitor telnet:127.0.0.1:1235,server,nowait

Build

Prepare iOS Image

I am following this wiki guide Bringing up the emulator to prepare the iOS image, which involves the following steps.

• Getting iOS firmware
• Getting precompiled system binaries
• Preparing the ramdisk
• Creating trustcache for the modified ramdisk (I am skip this step, beacause: This step is no longer needed as we now patch AMFI by default.)
  • Must Don
• Creating NVMe namespaces

Build QEMU

• build on mac os m1

brew install ninja pixman lzfse

mkdir build
cd build
# CFLAGS="$CFLAGS -I/opt/homebrew/include" LDFLAGS="$LDFLAGS -L/opt/homebrew/lib" C_INCLUDE_PATH="$C_INCLUDE_PATH:/opt/homebrew/include" LIBRARY_PATH="$LIBRARY_PATH:/opt/homebrew/lib" LIBTOOL="glibtool" ../configure --disable-sdl --disable-gtk --enable-cocoa --enable-lzfse --disable-werror
CFLAGS="$CFLAGS -I/opt/homebrew/include" LDFLAGS="$LDFLAGS -L/opt/homebrew/lib" C_INCLUDE_PATH="$C_INCLUDE_PATH:/opt/homebrew/include" LIBRARY_PATH="$LIBRARY_PATH:/opt/homebrew/lib" LIBTOOL="glibtool" ../configure --target-list=aarch64-softmmu --disable-sdl --disable-gtk --enable-cocoa --enable-lzfse --disable-werror

make -j$(sysctl -n hw.logicalcpu)
make DESTDIR=./bin/ install