Cubox Mac OS
Pop open Virtualbox, and Create a new Virtual Machine. Name this MacOS Mojave, and set it to Mac OS X (64-bit). Set the RAM to 4096 MB (or higher if you can achieve it!). When creating the disk, you can use either format versions. PAM on Mac OS X. As you may know, PAM is used everywhere on modern UNIX systems. Linux and Mac OS X use it to authenticate users. If you are a Mac user who likes to install weird stuff and edit PAM, you may have discovered that PAM under Mac OS X is totally undocumentated. Really, the only thing that you can have from Apple is a man page. You can't see which services use which file in /etc/pam.d/.
SupportedArmbian Buster
mainline based kernel 5.10.y
Armbian Focal
xfce mainline based kernel 5.10.y
- Gigabit Ethernet transfer rate is around 50% of its theoretical max rate (internal chip bus limitation)
Specifications
* Specifications differ from hardware revision, model and software support level
FAQs
We provide CLI (command line interface) images first. If the software is stable enough we add the option to upgrade to XFCE desktop. The Build-System relies on Debian and Ubuntu. The availability of different images may vary, most of the time because of driver restriction. Sometimes we provide only testing images.
All images can be built from sources at any time and in rare cases, where you can’t find an image which you need, you can build one.
Preparation
Cubox Mac Os Download
Make sure you have a good & reliable SD card and a proper power supply. Archives can be uncompressed with 7-Zip on Windows, Keka on OS X and 7z on Linux (apt-get install p7zip-full). RAW images can be written with Etcher (all OS). Where images are compressed with .xz you can wrtite them to the SD card with Etcher directly.
Boot
Insert the SD card into the slot, connect a cable to your network if possible or a display and power your board. (First) boot (with DHCP) takes up to 35 seconds with a class 10 SD Card.
Login
Log in as: root Password: 1234. Then you are prompted to change this password (US-Keyboard setting). When done, you are asked to create a normal user-account for your everyday tasks.
SUPPORTED devices are tested and they work apart from known issues and missing features. Support is provided as far as possible (in general there is no support for 3rd party hardware like DVB tuners and software like Kodi). Please check the documentation and existing forum posts before posting a question. Questions on private channels are ignored.
SUITABLE FOR TESTING (WIP) are devices which we’re currently working on but they are not ready! These images are suitable for developers and experienced users. They are not very well tested but they might work without any problems. Your help to improve this situation is greatly appreciated.
SUPPORT ENDED (EOS) status are devices which used to be supported in the past. Reasons for moving to this section:
- no active software development (mainline u-boot and kernel)
- no support from the vendor (hardware samples, documentation, software packages)
- never was sold, only samples in small quantities were available
- hardware design flaws don’t allow using these devices without stability issues
Support status:
- images are stable but we don’t test updating,
- images are provided with no support,
- most images have frozen kernel and u-boot packages to prevent their upgrades.
NO OFFICIAL SUPPORT (CSC) are devices which are supported by the 3rd party. We usually don’t have hardware samples nor conduct any tests but they might work. There is no support whatsoever.
Each supported Armbian image can be made from scratch – from latest kernel and u-boot sources, updated upstream packages and our most recent bug fixes and improvements. Supported build environment for SDK is Ubuntu Bionic 18.04 x64 but you can run it containerised virtually on any X64 based Linux distribution under Docker. You can re-make live bootable image or just a kernel+dtb(hardware configuration) package which you transfer to your image and install with: dpkg -i linux-image-[branch]-family.deb linux-dtb-[branch]-family.deb
. In that process you can enforce many customization. To the kernel or user space. Read more.
Tested 3rd party hardware
USB gateway
CyrusZ-Wave+
External enclosure
JMS567USB3.0
HDMI display
Waveshare 7'1024*600 touch
HDMI display
Iiyama Prolite1920x1080 touch
USB Bluetooth
CSRUSB2.0 / v4.0
USB Ethernet
AX88772AUSB 2.0 / 100Mbps
USB WiFi AC
8811auUSB2.0 / 433Mbps
USB WiFi AC
8814AUUSB3.0 / 1300Mbps
USB WiFi AC
MT7610USB2.0 / 433Mbps
Mac Os Versions
USB WiFi
RTL8188EUSUSB2.0 / 150Mbps
USB WiFi AC
RTL88x2BUUSB2.0 / 867Mbps
Recommended download
Builds were tested for booting and basic operations.Variant | EU | USA | Asia | Torrent | User space | Kernel | Integrity check | Size | Last modified | |
Buster | stable | 5.10.y | SHA | ASC | 361M | Mar 9 2021 | ||||
Buster xfce desktop | stable | 5.10.y | SHA | ASC | 962M | Mar 9 2021 | ||||
Focal | stable | 5.10.y | SHA | ASC | 296M | Mar 9 2021 | ||||
Focal xfce desktop | stable | 5.10.y | SHA | ASC | 843M | Mar 9 2021 |
Test builds
Builds were made automatically from the trunk with unknown support status. Use at your own risk!Variant | Global | China | Torrent | User space | Kernel | Integrity check | Size | Last modified | |
Hirsute | n/a | n/a | unstable | 5.10.32 | SHA | ASC | 292M | Apr 30 2021 |
PAM on Mac OS X
As you may know, PAM is used everywhere on modern UNIX systems. Linux and Mac OS X use it to authenticate users. If you are a Mac user who likes to install weird stuff and edit PAM, you may have discovered that PAM under Mac OS X is totally undocumentated. Really, the only thing that you can have from Apple is a man page. You can't see which services use which file in /etc/pam.d/
. This is a big pain when you want to edit stuff on your Mac without fearing being locked out.
Fortunately, there are some services that can be discovered easily. /etc/pam.d/sudo
is obviously the file for the sudo utility. If you want to edit stuff about it, just edit this file and don't forget to keep a root tab opened if you mess it up. The same for sshd. Just edit the file.
But I wanted to discover how to modify the login screen behaviour with PAM.
A little bit of background before
As I said on this blog (in an article written in French) I own a Yubikey. This awesome device is used to generate One Time Password among other amazing stuff. I personnaly use it to login on my Mac, ssh onto my server and use sudo without typing any password. This is really great when you are somewhere and people can look at your keyboard. A password generated by a Yubikey looks like vvcubkglngtjjnkjlhjvgfdinferfkjldcffulgnbnjt
(In fact, this is a valid one, but used. You can't do anything with it now. This the meaning of a One Time Password)
To setup your Yubikey with your services, you need to edit PAM. Thanks to Yubico we have a PAM plugin for Yubikey. I will not describe how to setup it here, just explain my config. I added this tiny line auth sufficient pam_yubico.so id=42 key=THISPARTISSECRET url=http://yk.cubox.me/wsapi/2.0/verify?id=%d&otp=%s verbose_otp
in /etc/pam.d/ssh
on my server, among other things. When I try to login, I get prompted with Yubikey for 'cubox':
and I can touch my Yubikey in order to log in. I love it.
Well, but how to setup my Mac with it?
I described how to use it, it's the same under Linux and Mac OS X. But only for sudo and sshd.
If you want to use it with your login screen, you need to add this line in /etc/pam.d/authorization
.
Unfortunatly, this does not use the PAM plugin to unlock my locked screen (You know, the thing you have when you lock your session, with your wallpaper and your image). If someone have an answer, please contact me! /etc/pam.d/screensaver
does not help.
Yeah, I am not joking. All this bloody article for just this line of important information. But as I said, this is documentated nowhere. I asked an Apple Genius and he was unable to answer me. Now, when I got prompted for my password, I just type enter and... Magic. It took me almost half of a year to find this. Thanks Apple.
Enjoy your secure login screen with Yubikey on your Mac! You don't need to buy the Rohos software for 32$. Just grab a root access and do some magic!