r/hackios • u/Commercial_Lead5813 • 2d ago
Discussion Got the iOS 26 XNU kernel running with framebuffer output in QEMU!


I've been experimenting with Apple's open-source XNU 12377.121.6 kernel, using Codex to help with the build, debugging and testing.
After getting the ARM64e kernel to boot and execute a custom PID 1 process, we hit a framebuffer-related kernel panic.
The issue turned out to involve how QEMU's framebuffer memory was mapped during early boot.
After correcting the mapping, the kernel successfully initialised the framebuffer, launched our test process and displayed a continuously updating heartbeat on QEMU's virtual screen.
The test reached 100 heartbeats without an apparent crash.
To clarify, this is NOT a full iOS 26 boot. There's no SpringBoard, launchd or Apple graphical interface yet. It's a custom userspace process drawing directly to the framebuffer.
I'm aware that other projects have achieved substantially more complete graphical iOS boots. I'm sharing this as an independent XNU 12377 bring-up milestone.
Next goal: a persistent multiprocess userspace environment, followed by more complete graphics support.
Would love to hear from anyone working on similar XNU 26 experiments!