Single user mode USB support

My macbook HD has broken, and Im attempting to recover my files through a USB drive.
I've only been able to boot up in single user mode and I've ran fsck and its getting alot of I/O errors.
I've followed the instructions here: http://www.macsage.com/mounting-usb-drive-in-single-user-mode/ but I dont seem to be able to my attached USB drive.
I run [CODE]ls /dev/disk*[/CODE] by booting with usb drive attached and again without it attached and both times i get: disk0 disk0s1 disk0s2 disk0s3
I'm pretty sure disk0s2 is my main HD as thats whats getting the errors from fsck.
So I'm really needing to know how to mount the USB though I dont know which disk it is (by doing disk*)
Any help is greatly appreciated!

wonza wrote:
its MS-DOS Fat32, as my other computer is a PC. I've tried
oops, pressed post too soon! meant to delete the "I've tried"

Similar Messages

Resetting the Admin password in single user mode

Ok, my friend bought an old Imac from someone she went to school with with OS 10.4.2 on it. It works fine except that she can not install any programs because there is an admin password that she does not know. She asked the person she bought it from, he says he doesn't even remember setting a password. Normaly with this issue id just pop in the install disk and reset it from there, except neither of them have the install disk, and my install disk is to current for the machine. Does anyone know how I can reset the admin acount using single user mode commands? I can do it on my Mac Book pro but it doesn't seem to work the same way on 10.4. Please help!
EDIT: It is a Power PC G3 if that helps.
Message was edited by: CartooNxHerO

CartooNxHerO wrote:
Ok, so I used the advice from the third link you gave me but i'm still in single user mode trying to figure out how to delete the users home folders.
Message was edited by: CartooNxHerO
You do not need to delete "the users home folders". Nor do you need to delete the netinfo database. Here are two proceedures:
Change Password
Mac OS X:
Changing or resetting an account password via GUI:
Resetting a user's password
Resetting the original administrator account password
http://docs.info.apple.com/article.html?artnum=106156
You do not have a CD/DVD
Changing password from single user mode:
You can also change the administrator's password from single user mode or create a new administrator account.
You need to get into single use mode for steps one and two that are listed below.
This page will tell you how to get into single user mode.
http://support.apple.com/kb/HT1492
Basically, you hold down the command-s key then powering on your machine. The command key has a little apple symbol on the lower left. It is between the alt/option key and the space bar. On a PC keyboard, it will be the windows key, I think.
1) You can change the password on an account. ( Do you know Unix. You are in a Unix single user console. ) The setup commands you need should be listed on the screen. For Mac OS 10.4.11, the commands are:
# Type the follow two instructions to access the startup disk in read/write:
/sbin/fsck -fy
/sbin/mount -uw /
# Start up some utility processes that are needed.
sh /etc/rc
# You will probably need to press the return key once the system stops typing.
# To find out the users on the system type, use the list command. The l is a lower case L:
ls /Users
# One of these accounts will be the administrator.
# Pick one of the users which I'll call a-user-name and type it in this command:
passwd a-user-name
# and enter the new user password. You need six characters.
# You will need to enter your password twice. Your typing will not show up on the screen just
# press enter when you complete the typing.
# For cryptic information on these commands try:
man ls
man passwd
The root account isn't enabled by default. I am not sure if changing the password on root will enable it.
2) Get the Mac to set up an additional administrative account. You can then change the password on your old account.
Start with your computer power off. Hold down command-s. Power on your computer.
Type in the following:
The first two commands will depend on your release of Mac OS X. Look at what is typed out in the console to determine the exact format.
# Type the follow two instructions to access the startup disk in read/write. Press return after each command.
/sbin/fsck -fy
/sbin/mount -uw /
cd /var/db
pwd
#List all files. The l is a lower case L.
ls -a
#The move command acts as a rename command in this format.
mv -i .applesetupdone .applesetupdone.old
reboot
Once you've done that the computer reboots and it's like the first time you used the machine. Your old accounts are all safe. From there you just change all other account passwords in the account preferences!!
Limnos adds detailed explainations:
http://discussions.apple.com/message.jspa?messageID=8441597#8441597
The above the idea came from a post by JoseAranda at September 9, 2006 3:48 AM
http://www.askdavetaylor.com/howdo_i_reset_my_mac_os_x_admin_rootpassword.html
You will need to scroll down to see this post. Search for applesetupdone
Or see:
http://superpixel.ch/articles/running-setup-assistant-again/
Once you have a new administrative account, you can change the password of your old administrative account
blue apple > System Preferences > Accounts

Single-user mode: How to mount and access an external USB drive?

My MacBook Pro HD is acting up. Cannot boot normally or into "safe mode". Cannot reinstall OS without wiping out the HD. Need to recover some critical files but DiskUtil First Aid and Restore options cannot successfully complete. Problem traced down to "invalid node structure" which means I either have a hardware problem or my filesystem partition directory structure is corrupted. I need to recover some files that are not backed up (timin issue with my regular backup process).
I can boot into single-user mode, mount the root file system (/sbin/mount -uw /) and can see/navigate the rot filesystem structure via good UNIX command line. Here's what I would like to do (in single-user mode):
1. Mount an external USB drive (250 GB already formatted as Mac OS X Extended)
2. Copy various files and/or directories from my HD to the external USB drive (UNIX cp command)
I realize I could go spend $$ for the Disk Warrior or Data Rescue products (or something similar) that SHOULD help me recover my HD or files, but it seems silly to do this when I can see, touch and taste them from within single-user mode....
Comments? Suggestions?
TIA --
Trent
P.S. Once I've recovered my files, I'll try to reformat the HD and then reinstall the OS. And THEN go have Apple look at my machine (thank goodness for AppleCare coverage)!

Resolution:
1) Boot system in single-user mode (SUM) with external HD attached.
2) Execute the following UNIX CLI commands once SUM boot process is completed:
# fsck -fy
# mount -uw /
# mkdir /Volumes/target_directory
# mount -t hfs -w /dev/diskXXX /Volumes/target_directory
# cp -RXv /source_directory /Volumes/target_directory
Where XXX is the device-level name for your external HD's data partition. In my case this was /dev/disk1s2. It may take some experimentation to identify this device name if your system has multiple HD's.
3) Verify contents were successfully copied onto the /Volumes/target_directory.
Comments and observations:
- Do NOT use "/" as your source directory - cp will make a second (redundant) copy of /volumes/target_directory
- I was able to successfully copy ALL files off my HD despite the fsck command's "invalid node structure" error message with this simple procedure. YMMV, depending on the state of your HD.
- The repeated disk0s2: I/O error warnings displayed during the SUM boot process did not seem to have a negative effect on this procedure. I also received this same error warning intermittently as I navigated the mounted filesystem did not seem to be a problem, either. Again, YMMV.
Commercial software:
I downloaded ProSoft Engineering's Data Rescue 3 product (trial version) before spending $99 to attempt to recover my "bad" HD's data via mounting to a good system with FW target mode. It could not successfully complete its "QuickScan" process and immediately hung on block 0 of 390M during its "Deep Scan" process. The product did seem to function properly on an operational system. ProSoft's technical support was responsive and helpful but had no answer for my "Deep Scan" error.
I did not attempt to use Alsoft's Disk Warrior 4 product. I could not find any trial software available and was reluctant to spend $100 based upon the mixed reviews and comments on this discussion forum as well as other reviews. Alsoft does claim to address the "invalid node structure" error in their marketing materials. Hindsight being 20/20 - I saved $100 by using this simple procedure.
Final note:
Neither Leopard nor Snow Leopard's installation DVD could recognize the bad internal HD when trying to do a reinstall. While DiskUtil was able to "see" the bad internal drive it immediately failed when I tried to do an "erase and format". Took the system to my local Apple store and the Genius ran a tool called "SMART Utility" from Volitans Software (www.volitans-software.com). SMART utility confirmed that my HD was bad so it was replaced. AppleCare pays for itself (once again!).

How to mount USB & CDROM drives from single user mode - Solaris boot disk?

Hi All,
I need to carry out ufsrestore on a single newly replaced system disk (no redundancy / mirroring) from either USB or CDROM drives from the following steps:
( i ) GRUB => e, e, cdrom –s, Enter, b (boot from Solaris 10 x86 media).
( ii ) Choose menu 1 for Install Solaris Interactive Mode to reach single user mode.Below are the commands that I have tried in single user mode without success:
mount –r –F pcfs /dev/dsk/c1t0d0p0 /cdrom (after unmount Solaris CD)
mount: /dev/dsk/c1t0d0p0 is not a DOS filesystem.
svcadm –v enable smserver
svcadm: Pattern ‘smserver’ doesn’t match any instances
svcadm enable autofs
svcadm: Pattern ‘autofs’ doesn’t match any instances
devfsadm
devfsadm: mkdir failed for /dev 0s1ed: Read-only file system
mkdir /mnt
mkdir: Failed to make directory “/mnt”; Read-only file systemPart of the problem is due to the current READ ONLY filesystems which does not allow the creation of mount point such as /mnt.
I have been able to create both / root (/dev/dsk/c1t0d0s0) and /export/home (/dev/dsk/c1t0d0s0) filesystems with newfs that are awaiting for restore using ufsrestore.
The only option I am left with is to attach a secondary disk to install Solaris 10 on either of them before bring the system to multi-user mode so that service such as volmgt, autofs, volfs are available to access USB & CDROM drives.
Any suggestion on how to resolve this issue?
Many thanks,
Jack

Hi JKGN,
Is the directory a located under the root filesystem. ie /a? Are there any other mount point for say USB drive as well? I am not in a position to try it out right now but will get back
to you soon on whether /a exist or not.
Btw, the last thing I managed to do on this system at the time was added a secondary 1TB internal disk with the intention to restore both / and /export/home data onto this disk while
making use of all the disk device management services such as the following services only available in a fully installed Solaris system (both single & multi-user modes) installed on the
primary disk:
# svcs smserver
STATE          STIME    FMRI
online         Jun_08   svc:/network/rpc/smserver:default
# svcs autofs
STATE          STIME    FMRI
online         Jun_08   svc:/system/filesystem/autofs:default
# devfsadm
# iostat -En
c1t0d0           Soft Errors: 0 Hard Errors: 0 Transport Errors: 0
Vendor: ATA      Product: SAMSUNG HD321KJ Revision: 0-11 Serial No:
Size: 320.07GB <320072932864 bytes>
Media Error: 0 Device Not Ready: 0 No Device: 0 Recoverable: 0
Illegal Request: 41 Predictive Failure Analysis: 0
c0t0d0           Soft Errors: 0 Hard Errors: 5 Transport Errors: 0
Vendor: PHILIPS Product: DVD+-RW DVD8801 Revision: AD21 Serial
Size: 17.54GB <17538875392 bytes>
Media Error: 0 Device Not Ready: 5 No Device: 0 Recoverable: 0
Illegal Request: 10 Predictive Failure Analysis: 0
c2t0d0           Soft Errors: 0 Hard Errors: 0 Transport Errors: 0
Vendor: JetFlash Product: Transcend 16GB   Revision: 1100 Serial No:
Size: 0.00GB <0 bytes>
Media Error: 0 Device Not Ready: 0 No Device: 0 Recoverable: 0
Illegal Request: 7 Predictive Failure Analysis: 0
# rmformat
Looking for devices...
     1. Volmgt Node: /vol/dev/aliases/cdrom0
        Logical Node: /dev/rdsk/c0t0d0s2
        Physical Node: /pci@0,0/pci-ide@1f,1/ide@0/sd@0,0
        Connected Device: PHILIPS DVD+-RW DVD8801 AD21
        Device Type: DVD Reader/WriterHowever, I was disappointed that "iostat -En" has not found the secondary disk (1 TB) even though it was available earlier, for Solaris installation as the only disk on the same system.
As a result, I am left with no option but the need to rebuild this system with only a single primary disk while in single user mode. However, the single user mode that I am in is the
one from Solaris installation disk with restrictive (_cannot create folder for mount point or running disk management utilities_) capability such as those services just covered, compared to one from a completed Solaris installation system with full access to all filesystems and utilities / commands in general.
I would very much value your assistance on how to mount both CD & USB in this restrictive limited Read Only OS (assume that it is running from memory) in order to get complete access to
the blank primary disk so that full restore with ufsrestore could take place.
Thanks in advance,
Jack
Edited by: 797805 on 9/06/2012 04:15

Cannot mount USB disk in SIngle-user mode (solaris 10)

Hi all ,
I need some help please :
I can read/write to my USB disks when i'm in muti-user mode but when to I swith to single-user mode ( init S ), I cannot mount it.
in Single-user mode , i started volume management daemon :
#/etc/init.d/volgmt start
#volcheck
but i'm still not able to mount it.
I tried to mount manually:
#mount /dev/dsk/c2t0d0p0 /testpoint , i have this error: < mount : not a UFS magic number ( 0x0) , dev/dsk/c2t0d0p0 is not of this fstype.
My system recognizes the USB device though in single-user mode:
This is an output of #iostat -En
c2t0d0 Soft Errors: 1 Hard Errors: 0 Transport Errors: 0
Vendor: BUFFALO Product: ClipDrive Revision: 2.00 Serial No:
Size:0.07GB <65339392 bytes>
Media Error: 0 Device Not Ready: 0 No Device: 0 Recoverable: 0
Illegal Request: 1 Predictive Failure Analysis: 0

Hi ,
thanks for your advice. My problem is resolved.
The USB drive was actually a FAT filesystem.
so I did # mount -F pcfs /dev/dsk/c2t0d0p0:c /testpoint and everything went fine
I can read/write to my USB disks when i'm in
muti-user mode but when to I swith to single-user
mode ( init S ), I cannot mount it.
in Single-user mode , i started volume management
daemon :
/etc/init.d/volgmt start
#volcheck
but i'm still not able to mount it.It probably requires other items to be started
first.
I tried to mount manually:
#mount /dev/dsk/c2t0d0p0 /testpoint , i have
this
error: < mount : not a UFS magic number ( 0x0) ,
dev/dsk/c2t0d0p0 is not of this fstype.
Looks like it's assuming UFS. If this is a pcfs
filesystem, give it the type on the mount line.
# mount -F pcfs /dev/dsk/c2t0d0p0 /testpointYeah, this was the right command, I had to specify option < -F pcfs >.
but I read somethere on this forum i had to specify :c as the drive for FAT at the end of c2t0d0p0 , so the full command was:
# mount -F pcfs /dev/dsk/c2t0d0p0:c /testpoint
>
DarrenThanks,
Sakolan.

Mount device via USB in single user mode

Hi.
Help much needed. My macbook pro appeared to be crashed with harddisk problem
at start time... unable to boot to normal login screen.
When I run in single user mode, I dont seem to see my thumbdrive, or external device.
I connected them via the USB ports on my Macbook pro (17")(Snow Leopard)
I checked /dev/disk* and saw only disk0 (disk0, disk0s1, disk0s2, disk0s3).
I never get to see disk1 no matter what I tried. (I've various MSDOs format,
or NTFS format disks).
I followed the advise here:
http://www.insanelymac.com/forum/index.php?showtopic=232365
Am I supposed to be able to see the drive the moment I connect it to the
port?
Thanks.
Marc

When I insert the disk, the root prompt would come telling me the USBMSC message. So, it does know I inserted the external drive. But yet, no new refresh of the /dev.
The device should be listed in /dev after the USBMSC message whether you mounted the root file system write or not.
$ ls /dev/disk*
/dev/disk0 /dev/disk0s1 /dev/disk0s2 /dev/disk0s3
Either the boot partition table is APM or GPT with two partitions.
I went to /Volumes and able to read the directory of files that I want to copy.
You should stay out of the /Volumes directory. Reference your path like->
ls -l /Users/<your name>/Documents/
And avoid creating mount points in the /Volumes directory. It is used by diskarbitration.
At this point, I would stop running fsck_hfs on the device (or any other utility) and either try to mount the drive via firewire disk mode or have someone block copy the disk.

Mount USB Device in Single User Mode

Hi All,
Can anyone give me any assistance of mounting a USB stick in single user mode?
I am trying to use the command:
$ mount -uw /dev/disk2s1 /Volumes/usb
But it get the error:
--specified device does not match mounted device
If I put the USB stick in normal OSX mode, then run 'df -k' in terminal, it is mounted by automounter, but I can't seem to get it to mount in single user mode.
Thanks,
Nik

Hi Nik,
   I don't believe that there are enough services started in Single User Mode to do this; you'll have to start the services yourself. However, I haven't tested this so I don't know. Wanna be a Guinea Pig?
   If your going to need to write to the boot drive, mount it read/write with:
/sbin/mount -uw /
Next, start the basic services, including diskarbitrationd:
/usr/libexec/registermach_bootstrapservers /etc/mach_init.d
The above should be one line, modulo wrapping. Then start diskarbitrationd:
/sbin/SystemStarter start Disks
You should probably check /dev and see what disks are already mounted. (without the USB stick) I assume that the services that mount removable media are now started so insert the stick and see if it appears mounted in /Volumes. Otherwise, check /dev and see if there's a new disk. If it only appears in /dev, you can use the standard mount command to mount it. If it doesn't appear in /dev then you might reboot into Single User Mode and repeat the procedure with the USB stick already inserted. If none of that works then this must not be the right method and you have my apologies.
Gary
~~~~
   Computers are like air conditioners. Both stop working
   if you open windows.
      -- Adam Heath

Mounting a usb hard drive in single user mode

I've gotten as far as connecting the hard drive at boot, but I don't know how to figure out which dev is the hard drive, and which arguments to use with the mount command. I can't do much when I login, and I'm trying to cp files from my hard drive to my external hard drive through single user mode.
Any help is greatly appreciated. Thanks.

Hi leung wai,
   I wouldn't mind knowing the answer myself. I think the problem with doing it in the manner you attempted is that the device tree hasn't been created yet so the mount command is certainly not going to work. I assume that the answer is to start up enough of the system to have the device tree created. Unfortunately, I don't know where in the startup process that occurs. You could try the following command after making the boot volume writable:
/usr/libexec/registermach_bootstrapservers /etc/mach_init.d
Then check to see if the /dev virtual filesystem has been created. Of course it wouldn't surprise me if that didn't also mount your disks. If not, try the following:
/sbin/SystemStarter
It should have been created after that because at that point almost the whole system has started.
Gary
~~~~
   You've been telling me to relax all the way here, and
   now you're telling me just to be myself?
         -- The Return of the Secaucus Seven

Data back up from Single User Mode

Hello,
I have a problem with my 700 MHz iBook, dual USB, with OS X 10.3.9.
Unfortunately the OS doesn't start up because of "overlapped extent allocation" problem...
I would like to re-install the complete OS but before doing it, I would like to back up some directories.
Is it possible to save some data, by connecting an Ipod or some sort of external peripheral, from the Single User mode?
If yes, how can I do it?
Thank you in advance from your kind support.

Before giving up the ghost check out these:
http://docs.info.apple.com/article.html?artnum=25770.
Manually fix Overlapped Extent Allocation Errors without Disk Warrior
Overlapped overlapped extent allocation errors can be the bane of any Mac user's existence. Often, these errors go unnoticed until the problem becomes visible: your Mac might refuse to boot, crash unexpected, or worse, critical data might disappear from the Finder. Disk Utility can detect, but not fix overlapped extent allocation errors, and certain third-party utilities, such as Alsoft Diskwarrior, can fix them, but generally without reporting the consequences.
Overlapped extent allocation error occur when the file system thinks that two files are occupying the same area on the hard disk, hence overlapping on the same "inode," which is the structure which holds the location of the data blocks the file occupies, and also file permissions and flags.
Clearing the "overlapped" or "overallocated" extent allocation essentially means that you'll have to lose some data, because the only way to remove the overlap is to delete the file that's occupying the inode. So, if you suspect, or find out, that the guilty file is a critical system file that resides in one of the hidden system directories such as /etc /var /usr/ or visible system directories such as /System or /Library, and you don't want to reinstall the whole OS (which might not fix the overlapped extent allocation anyway), it's good to have another disk available to copy the files back to your original disk if necessary: a second bootable hard drive or a firewire drive connected to your Mac when you remove the misbehaving file. Just make sure that when you copy the file back to your boot disk that the permissions are correct, so it's best to use the "ditto" command, so that all sticky bits, flags, and permissions are preserved.
In case you didn't know, you don't have to boot from an install CD in order to check for overlapped extent allocations. All you need to do is restart your Mac, while holding down command + S to boot in "single-user mode."
At the command prompt that appears, type:
$ fsck -fy
If you have an overlapped extent allocation, you'll see:
"Overlapped Extent Allocation" (File 123456d)
No matter how many times you run fsck -fy, you'll never be rid of the error.
So, simply issue the following command:
find / -inum 123456 -print
Note the "d" was dropped, or any extra letter that appears after the inode number.
The find will return a file name that matches with the inode number, and the path to that file. If you remove the file then the fsck will not return this error next time you run it.
However, before you can delete the file(s) in single-user mode, you'll need to mount the file system. Type:
$ mount -uw /
When done, issue the "sync" command, and that will flush the write cache so that all pending writes are written from memory to the disk. Also, since most OS X 10.3 Macs use the HFS+ Journaled file system, it might be a good idea to disable the journal before booting into single-user mode by typing:
$ sudo diskutil disableJournal /
then re-enable it when done fixing the overlapped extents and rebooting normally:
$ sudo diskutil enableJournal /
Chris Anderson is a long-time Linux propellerhead who just got his first Mac, an ibook G4, and can't keep his hands off of it. He currently works as a "The Architect" and general visionary for a maker of world-class collectibles.
If you own Disk Warrior then it should be able to repair a drive with overlapped extents.
There are two backup utilities included in Unix - psync and rsync. You will find them in the /usr/bin/ directory. For documentation simply enter: man psync or man rsync. In order to write data while in single-user mode you need to issue the command: /sbin/mount/ -uw / (Note: there is a "space" between the "uw" and the "/".) To mount an external drive you will need to provide the mountpoint for it in place of the "/", e.g., "/Volumes/volname") without the quotes.

How do i repair my hard drive in single user mode when disk is full?

Hi there Apple Community!
I have an old Macbook Pro 17" with an upgraded 500GB harddrive and 4GB memory. I'm running Mac OSX Lion.
Was hoping you could help me out. THis is the situation:
Long story short I spilt wine on my macbook and the screen went a bit blobby. Switched it off for a few days, removed the battery etc. etc. Opened it up cleaned out as much of the wine as possible, but unfortunately some of it came in behind the LCD, so now the screen has a nice red stain. Obviously I'm not going to try to clean that out of the LCD.
My Macbook Pro still worked for a few days after that, but then my harddrive gave up. I booted in the Recovery HD menu, verified the drive and I got the error "Keys out of order - This disk needs to be repaired, click Repair Disk." I attempted to repair the disk but got the error "Keys out of order - Disk Full Error - The volume could not be repaired".
Unfortnately of this 500GB I only have about 7GB free on it, as I have a huge iPhoto and iTunes library. I did make a TIme Machine backup of my user directory, but not the system files. I don't really want to do a clean install because:
1) I'm paranoid that there's something I did not fully back up
2) I don't want to have to download the whole Mac OSX Lion again. I should have made a USB bootable backup when I had the chance. I don't have access to a broadband connection.
What I feel are my viable options, are as follows:
1) I did buy a replacement internal 500GB harddrive, so I can probably try to make an image of the hard drive to this new drive, but not sure how. I believe it's through the Disk Utility with the "New Image" option but not sure how to go from there.
2) Start up in Single User Mode and delete some unnecessary files and re-attempt to run the fschk -fy utility again (I tried this earlier and got the same Disk Full Error). - the problem with this is, I'm not familiar with the command line and have no clue how to delete files. I don't know my way around Unix.
3) I can also probably attempt to make a Ghost Image or Acronis Image of the failed drive to this new drive, but not sure if Norton Ghost or Acronis True Image will be able to read this HFS drive - I believe it's possible as it's a simple hard drive clone.
If you can guide me in the best option - probably there is a better solution than my proposed ones above, I appreciate any feedback and comments you might have!

hi Baltwo,
So I ended up copying my user folder to another harddrive. I managed to download the whole osx lion again, reinstalled, and recovered my home folder using this discussion:
http://support.apple.com/kb/HT1428
I have managed to get all my files back. My iTunes library works fine, but my iPhoto library when I open it, get the following error:
iPhoto cannot be opened because of a problem.
Here's the error log
Process:         iPhoto [1540]
Path:            /Applications/iPhoto.app/Contents/MacOS/iPhoto
Identifier:      com.apple.iPhoto
Version:         8.1.2 (8.1.2)
Build Info:      iPhotoProject-4240000~8
Code Type:       X86 (Native)
Parent Process: launchd [209]
Date/Time:       2012-09-19 19:56:45.528 +0200
OS Version:      Mac OS X 10.7.4 (11E53)
Report Version: 9
Sleep/Wake UUID: 7948ABE2-5294-4F87-B6E3-777095A2F2EE
Interval Since Last Report:          4780 sec
Crashes Since Last Report:           9
Per-App Crashes Since Last Report:   9
Anonymous UUID:                      70117D38-03EA-4F9C-B810-50B743864B9E
Crashed Thread: 0
Exception Type: EXC_BREAKPOINT (SIGTRAP)
Exception Codes: 0x0000000000000002, 0x0000000000000000
Application Specific Information:
dyld: launch, loading dependent libraries
Dyld Error Message:
Library not loaded: /System/Library/PrivateFrameworks/iLifeSlideshow.framework/Versions/A/iLifeSlid eshow
Referenced from: /Applications/iPhoto.app/Contents/MacOS/iPhoto
Reason: image not found
I've done an Apple Software Update but it didn't find an update for iPhoto.
One thing to note is, this library was originally created on iLife 08, upgraded to '09 and it stayed on that version. It hasn't een upgraded to iLife '11. It worked fine on my previous install of OSX Lion. How do I recover the library without upgrading to '11 ?

Back up files through Single user mode

Hello there,
it seems that I have problem with my hard drive. I tried to repair it with disk utility and the fsck command in Single user mode with no luck. The fsck command gives me the "Exited with signal 8" message and it won't start up the usual way or under Safe boot so I came to the conclusion to back up my files on an external drive and reinstall the system. I need step by step instructions how to back up the entire hard drive onto the external drive in Single User mode.

Do you have another mac with firewire?
Try target disk mode.
If you have a second Mac computer, you may want to try to copy over as many files you can. One way is to use target disk mode.
http://support.apple.com/kb/HT1661
http://lowendmac.com/misc/06/0710.html
This requires you to use your installation disk. With errors from fdsk, I do not think you will be able to copy all directories. I used a flash drive. A harddrive should be the same. To copy everything, use the directory /Volumes/Macintosh-HD
You may try to recover your data by booting up an installation cd/dvd and using the terminal.
You could try getting into the Unix command line interface and copy some files or directories.
You can copy files on the Unix command line interface if you placed the flash drive the USB port before powering on your machine.
Boot up your installation CD or DVD. To do this, place to the CD or DVD its drive. Power off the the machine. Hold down the c key then power on your machine. After you specify the language you will come to the installation panel. Do not install. Go to the top of the screen and click on the tools menu item. Click on Terminal to use the command line interface.
You should verify that the files have been copied correctly by trying them in another Mac before it the deleting the original.
*Here is an overview of the commands.*
Lets assume that the problem account has a short user name of mac.
#Copy directory "/Applications/Applescript files" to
# directory "/Volumes/Spotless/Applescript files".
# "Spotless" is my flash drive.
ditto -X -rsrc /Applications/Applescript\ files /Volumes/Spotless/Applescript\ files
#cd is change directory
cd /Volumes/COPYIT/answers/
# pwd is print working directory
pwd
#the ls command is for list
# l is long
# a to show hidden files. not shown in this example.
# F is type of file where / is directory
sh-2.05b# # Please note ls is the list command. l is a lower case L
sh-2.05b# ls -lF
Here is what these commands mean:
cd is change directory
pwd is a print working directory
ls is list
sudo is Super user do
# The sudo command will ask for your administration password. No characters will appear when typing your password. Press return when done typing.
cp is copy
copy a file example:
sh-2.05b#
sh-2.05b# cd /Volumes/Macintosh-HD/Users/mac/desktop
sh-2.05b# pwd
/Volumes/Macintosh-HD/Users/mac/desktop
sh-2.05b# cp -i answers.txt /Volumes/SpotMore
Will copy the file answers.txt in the directory SpotMore.
Some files have a space in the name. You need to escape. see example:
mac $ ls -l ~/"see it"
-rw-r--r-- 1 mac staff 3171 Oct 26 23:38 /Users/mac/see it
mac $
mac $ cd /Users/mac/Desktop/ttt\ html\ copy/
Do you know about tabing? Type in a few letters of a name then press the tab key. The computer will type out the rest of the name if it is unique.
The up arrow key will retrive the previous command. You the left arror and right arror keys to move around. Use the delete key to delete a character to the left.
<eol>
*More examples and moving around*
sh-2.05b# pwd
sh-2.05b# ls /Volumes
.Trashes Classic Macintosh-HD
._.Trashes Mac OS X Install DVD SpotMore
sh-2.05b#
sh-2.05b# df -h
Filesystem Size Used Avail Capacity Mounted on
/dev/disk4s3 2.6G 2.5G 89M 97% /
devfs 121K 121K 0B 100% /dev
fdesc 1.0K 1.0K 0B 100% /dev
<volfs> 512K 512K 0B 100% /.vol
/dev/disk5 467K 9.0K 435K 2% /Volumes
/dev/disk6 95K 64K 27K 70% /private/var/tmp
/dev/disk7 95K 14K 77K 15% /private/var/run
/dev/disk3s1 3.7G 1.3G 2.5G 34% /Volumes/SpotMore
/dev/disk0s10 1.1G 1.1G 3.4M 100% /Volumes/Classic
/dev/disk0s12 70G 45G 25G 65% /Volumes/Macintosh-HD
sh-2.05b#
sh-2.05b# cd /Volumes/SpotMore/
sh-2.05b# pwd
/Volumes/SpotMore
sh-2.05b# # Please note ls is the list command. l is a lower case L
sh-2.05b# ls -l
total 880
-rw-r--r-- 1 unknown unknown 6148 Sep 10 2010 .DS_Store
drw------- 4 unknown unknown 136 Aug 25 2010 .Spotlight-V100
drwxrwxrwt 3 unknown unknown 102 Sep 3 2010 .TemporaryItems
d-wx-wx-wt 3 unknown unknown 102 Sep 10 2010 .Trashes
drwx------ 3 unknown unknown 102 Sep 3 2010 Desktop
-rw-r--r-- 1 unknown unknown 18944 Aug 27 2010 Desktop DB
-rw-r--r-- 1 unknown unknown 2 Jul 29 2010 Desktop DF
-rwxrwxrwx 1 unknown unknown 26281 Oct 27 2009 Warranty Information.PDF
drwxr-xr-x 13 unknown unknown 442 Aug 4 2010 backup
drwxr-xr-x 13 unknown unknown 442 Aug 4 2010 backupPrior
drwxr-xr-x 7 unknown unknown 238 Aug 27 2010 cons
drwxr-xr-x 65 unknown unknown 2210 Sep 4 2010 iMac-back
... clipped ...
sh-2.05b#
sh-2.05b# cd /Volumes/Macintosh-HD/Users/mac/desktop
sh-2.05b# pwd
/Volumes/Macintosh-HD/Users/mac/desktop
sh-2.05b# # Please note ls is the list command. l is a lower case L
sh-2.05b# ls
Z2300 iMac
.DS_Store move
.FBCIndex new Belward
.FBCLockFolder primary-comments-new copy.doc
Consolidate-rc primary-comments-new.doc
Downloads psc 1200
... clipped ...
sh-2.05b# ditto -X -rsrc iMac /Volumes/SpotMore/iMac-back
sh-2.05b#
sh-2.05b# # Please note ls is the list command. l is a lower case L
sh-2.05b# ls -h /Volumes/SpotMore/iMac-back/
total 2800
-rw-r--r-- 1 unknown unknown 24K Sep 12 2010 .DS_Store
-rw-r--r-- 1 unknown unknown 2K Apr 18 2010 Differentiate Between Models .html
... clipped ...
sh-2.05b# pwd
/Volumes/Macintosh-HD/Users/mac/desktop
sh-2.05b# ls
Z2300 iMac
.DS_Store move
.FBCIndex new Belward
.FBCLockFolder primary-comments-new copy.doc
... clipped ...
sh-2.05b#

IMac G5 won't boot in normal and safe mode, but will from single-user mode

Hello everyone,
I'm quite new here, so I try to do my best if you have a question.
Yesterday, someone nearby me had a iMac G5 (Powermac8,1), and he sayd, that the computer sometimes will boot, sometimes not.
I did test it, I thought it was running fine, but when I played some music in iTunes, it was stuck on 9 seconds, and crashed (with a kernel panic). The guy also sayd, that there was nothing important on the computer, so a clean install was fine.
Now, the problem is, that it will not boot in normal mode (without anything pressed on boot), also it won't in safe mode (shift-boot), but it will, when I enter single-user mode, mount the hard drive and exit from single-user mode so it will go futher on booting. Sometimes it will not, and immediately gives you a kernel panic in single-user mode, but it will 90 percent of the time.
Then you've got another problem: when it's running in the normal desktop from single-user mode, it'll be stuck after some time again. If I look into the Kernel Panic file created, most times it's because of Spotlight indexing, so I disabled that.
He also gave me the disks (Apple Hardware Test and Extra Applications, and iMac G5 Mac OS X Install Disks 1-3) that came with the Mac. He sayd that I could use them, but I think he didn't test out the SuperDrive, because when I insert a disk, it will try to read, but it will make 2 same sounds, and quits after 10 tries, when it will spit the cd out. Also normal (audio) disks.
Also, I must hurry with the commands for mounting and exiting in single-user mode, or it will just not boot.
In all cases, after 30-45 seconds from pressing the power button, the fan will start blowing at full speed, and it will stop after the exit command in Single-user mode. That's weird.
I can't do anything with the SuperDrive, I can't normally boot in Mac OS X except for Single-user mode (but I don't think he would like to do that every time the computer boots up), and I have very limited time when Mac OS X arrived on the desktop.
When booting in Verbose mode, it will be stuck on this:
AppleSMU::PMU vers = 0x000d004c, SPU vers = 0x15, SDB vers = 0x01,
(and sometimes ends with a kernel crash by fsck_hfs)
Things I've tried (without any success):
- /sbin/fsck -fy (in single-user mode)
- Disabling Spotlight and mds
If you want some more information, feel free to ask!
Greetings
-MrYoranimo
PS: My main language is Dutch, so my English can be bad at some points.

Thank you for your support! This reply is a little bit late, because I was to the camping this weekend.
The only thing I sure do know, is that the iMac has a bad SuperDrive. That's one problem, but I don't really wanna use it, and you fix everything by Single-user mode and when I get to the desktop to test things and change stuff in the Preference Panes.
What also came to my mind was that there also is a problem with the videocard (driver), because sometimes when I boot into Single-user mode, I can see some white pixels which aren't supposed to be there. And when booting from SUM you can see that some of the colors are different and there are weird patterns on the screen.
I also tried to setup a NetBoot server on this computer (MacBook Mid 2010) with just Lion 10.7.4 on it, but I'm not that expert and I didn't really find the good posts on the Internet, although I tried it with the Server applications and both Server applications and DeployStudio. But I didn't succeed.
I don't really like buying a new FireWire hard disk or external FireWire dvd reader/writer, except if it has USB support, because my MacBook doesn't support FireWire, and I really wanna make use of it then.
If I know more or have fixed it, I will surely post again here with what I did to fix it (if no one else has posted here already ).

Copying a file in Single User Mode

Hi all,
I was in the hospital, trying to backup files from my 15 inch Macbook Pro (new in November, running the latest OS), when I knocked over a cup of coffee, burning me. I knocked the computer onto the floor as I jumped up and now it is locked and read only, no matter what I do (original attempts to fix can be found here: https://discussions.apple.com/message/21633118#21633118). I can boot into single user mode, or holding down 'option' when I push the power button, but not boot normally to save my life.
I need to copy the entire user file ("Liz") from the damaged HD in single user mode to an external drive ("passport"). Is this possible? I tried using disk utility to copy the files, but it gives me an IO error. Being a novice, I am unsure if this is possible. It's the last chance I think I have to save the files I was *trying* to backup when I spilled the coffee. Some of it is critically important, so if you have any ideas, PLEASE let me know.
Thank you in advance.
Liz

There are several ways to back up a Mac that is unable to fully boot. You need an external hard drive to hold the backup data.
1. Boot into Recovery (command-R at startup) or from a local Time Machine backup volume (option key at startup.) Launch Disk Utility and follow the instructions in the support article linked below, under “Instructions for backing up to an external hard disk via Disk Utility.”
How to back up and restore your files
2. If you have access to a working Mac, and both it and the non-working Mac have FireWire or Thunderbolt ports, boot the non-working Mac in target disk mode by holding down the key combination command-T at the startup chime. Connect the two Macs with a FireWire or Thunderbolt cable. The internal drive of the machine running in target mode will mount as an external drive on the other machine. Copy the data to another drive. This technique won't work with USB, Ethernet, Wi-Fi, or Bluetooth.
How to use and troubleshoot FireWire target disk mode
3. If the internal drive of the non-working Mac is user-replaceable, remove it and mount it in an external enclosure or drive dock. Use another Mac to copy the data.

IMac 7,1 boot only in single user mode

Hi all
I've a colleague with the following problem... his iMac 20'' (iMac7,1) is able to boot ONLY in safe/single user mode (with shift key pressed during boot).
If he tries to boot normally, after the usual Apple logo screen he gets a blank (light grey) screen. No finder, no login screen.
We've tried this procedures:
- SMB reset
- PRAM cleared
- OS Reinstall (we've tried from Lion to Mavericks... actually there's 10.7.5 installed)... note that ALL installation procedure has completed successfully.
- tested the 1 RAM module installed (seems to be OK)
- tested the HD (no problems found)
Despite all these attempts, this iMac is booting well only if we press SHIFT during startup. All programs run well, wifi is working and online update too. If we reboot leaving it to restart normally (no key pressed) it shows Apple Logo for 1 minutes, then (after a black reset of the screen) seems to crash/stuck into an empty grey screen.
Is possible to identify which driver/kext is causing this problem? It can be an hardware problem? How we can fix it?
Thank you!

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.
Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.
2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.
There are ways to back up a computer that isn't fully functional. Ask if you need guidance.
3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.
You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.
In this case, however, there are a couple of ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the necessary skill can verify what it does.
You may not be able to understand the script yourself. But variations of the script have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message.
Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.
4. Here's a summary of what you need to do, if you choose to proceed:
☞ Copy a line of text in this window to the Clipboard.
☞ Paste into the window of another application.
☞ Wait for the test to run. It usually takes a few minutes.
☞ Paste the results, which will have been copied automatically, back into a reply on this page.
The sequence is: copy, paste, wait, paste again. You don't need to copy a second time. Details follow.
5. You may have started the computer in "safe" mode. Preferably, these steps should be taken in “normal” mode, under the conditions in which the problem is reproduced. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.
6. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.
7. The script is a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, though you may not see all of it in the browser window, and you can then copy it. If you try to select the line by dragging across the part you can see, you won't get all of it.
Triple-click anywhere in the line of text below on this page to select it:
PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/libexec;clear;cd;p=(Software Hardware Memory Diagnostics Power FireWire Thunderbolt USB Fonts SerialATA 4 1000 25 5120 KiB/s 1024 85 \\b%% 20480 1 MB/s 25000 ports ' com.clark.\* \*dropbox \*genieo\* \*GoogleDr\* \*k.AutoCAD\* \*k.Maya\* vidinst\* ' DYLD_INSERT_LIBRARIES\ DYLD_LIBRARY_PATH -86 "` route -n get default|awk '/e:/{print $2}' `" 25 N\\/A down up 102400 25600 recvfrom sendto CFBundleIdentifier 25 25 25 1000 MB ' com.adobe.AAM.Updater-1.0 com.adobe.CS4ServiceManager com.adobe.CS5ServiceManager com.adobe.fpsaud com.adobe.SwitchBoard com.apple.AirPortBaseStationAgent com.apple.installer.osmessagetracing com.apple.SafariNotificationAgent com.apple.usbmuxd com.apple.xprotectupdater com.google.keystone.agent com.google.keystone.daemon com.microsoft.office.licensing.helper com.oracle.java.Helper-Tool com.oracle.java.JavaUpdateHelper ' ' 879294308 3627668074 1083382502 1274181950 1855907737 464843899 1233118628 2636415542 842973933 4019080058 3301885676 891055588 998894468 695903914 1443423563 ' 51 5120 files );N5=${#p[@]};p[N5]=` networksetup -listnetworkserviceorder|awk ' NR>1 { sub(/^$[0-9]+$ /,"");n=$0;getline;} $NF=="'${p[26]}')" { sub(/.$/,"",$NF);print n;exit;} ' `;f=('\n%s: %s\n' '\n%s\n\n%s\n' '\nRAM details\n%s\n' %s\ %s '%s\n-\t%s\n' );S0() { echo ' { q=$NF+0;$NF="";u=$(NF-1);$(NF-1)="";gsub(/^ +| +$/,"");if(q>='${p[$1]}') printf("%s (UID %s) is using %s '${p[$2]}'",$0,u,q);} ';};s=(' s/[0-9A-Za-z._]+@[0-9A-Za-z.]+\.[0-9A-Za-z]{2,4}/EMAIL/g;/faceb/s/(at\.)[^.]+/\1NAME/g;/\/Shared/!s/(\/Users\/)[^ /]+/\1USER/g;s/[-0-9A-Fa-f]{22,}/UUID/g;' ' s/^ +//;/de: S|[nst]:/p;' ' {sub(/^ +/,"")};/er:/;/y:/&&$2<'${p[10]} ' 1s/://;3,6d;/[my].+:/d;s/^ {4}//;H;${ g;s/\n$//;/s: [^EO]|x([^08]|02[^F]|8[^0])/p;} ' ' 5h;6{ H;g;/P/!p;} ' ' ($1~/^Cy/&&$3>'${p[11]}')||($1~/^Cond/&&$2!~/^N/) ' ' /:$/{ N;/:.+:/d;s/ *://;b0'$'\n'' };/^ *(V.+ [0N]|Man).+ /{ s/ 0x.... //;s/[()]//g;s/(.+: )(.+)/ (\2)/;H;};$b0'$'\n'' d;:0'$'\n'' x;s/\n\n//;/Apple[ ,]|Genesy|Intel|SMSC/d;s/\n.*//;/\)$/p;' ' s/^.*C/C/;H;${ g;/No th|pms/!p;} ' '/= [^GO]/p' '{$1=""};1' ' /Of/!{ s/^.+is |\.//g;p;} ' ' $0&&!/ / { n++;print;} END { split("'"${p[41]}"'",b);for(i in b) print b[i];if(n<10) print "com.apple.";} ' ' $3~/[0-9]:[0-9]{2}$/ { gsub(/:[0-9:a-f]{14}/,"");} { print|"tail -n'${p[12]}'";} ' ' NR==2&&$4<='${p[13]}' { print $4;} ' ' END { $2/=256;if($2>='${p[15]}') print int($2) } ' ' NR!=13{next};{sub(/[+-]$/,"",$NF)};'"`S0 21 22`" 'NR!=2{next}'"`S0 37 17`" ' NR!=5||$8!~/[RW]/{next};{ $(NF-1)=$1;$NF=int($NF/10000000);for(i=1;i<=3;i++){$i="";$(NF-1-i)="";};};'"`S0 19 20`" 's:^:/:p' '/\.kext\/(Contents\/)?Info\.plist$/p' 's/^.{52}(.+) <.+/\1/p' ' /Launch[AD].+\.plist$/ { n++;print;} END { split("'"${p[41]}"'",b);for(i in b) print b[i]".plist";if(n<200) print "/System/";} ' '/\.xpc\/(Contents\/)?Info\.plist$/p' ' NR>1&&!/0x|\.[0-9]+$|com\.apple\.launchctl\.(Aqua|Background|System)$/ { print $3;} ' ' /\.(framew|lproj)|\):/d;/plist:|:.+(Mach|scrip)/s/:[^:]+//p ' '/^root$/p' ' !/\/Contents\/.+\/Contents|Applic|Autom|Frameworks/&&/Lib.+\/Info.plist$/ { n++;print;} END { if(n<1100) print "/System/";} ' '/^\/usr\/lib\/.+dylib$/p' ' /Temp|emac/{next};/(etc|Preferences|Launch[AD].+)\// { sub(".(/private)?","");n++;print;} END { split("'"${p[41]}"'",b);split("'"${p[42]}"'",c);for(i in b) print b[i]".plist\t"c[i];if(n<500) print "Launch";} ' ' /\/(Contents\/.+\/Contents|Frameworks)\/|\.wdgt\/.+\.([bw]|plu)/d;p;' 's/\/(Contents\/)?Info.plist$//;p' ' { gsub("^| |\n","\\|\\|kMDItem'${p[35]}'=");sub("^...."," ") };1 ' p '{print $3"\t"$1}' 's/\'$'\t''.+//p' 's/1/On/p' '/Prox.+: [^0]/p' '$2>'${p[43]}'{$2=$2-1;print}' ' BEGIN { i="'${p[26]}'";M1='${p[16]}';M2='${p[18]}';M3='${p[31]}';M4='${p[32]}';} !/^A/{next};/%/ { getline;if($5<M1) a="user "$2"%, system "$4"%";} /disk0/&&$4>M2 { b=$3" ops/s, "$4" blocks/s";} $2==i { if(c) { d=$3+$4+$5+$6;next;};if($4>M3||$6>M4) c=int($4/1024)" in, "int($6/1024)" out";} END { if(a) print "CPU: "a;if(b) print "I/O: "b;if(c) print "Net: "c" (KiB/s)";if(d) print "Net errors: "d" packets/s";} ' ' /r\[0\] /&&$NF!~/^1(0|72\.(1[6-9]|2[0-9]|3[0-1])|92\.168)\./ { print $NF;exit;} ' ' !/^T/ { printf "(static)";exit;} ' '/apsd|BKAg|OpenD/!s/:.+//p' ' (/k:/&&$3!~/(255\.){3}0/ )||(/v6:/&&$2!~/A/ ) ' ' $1~"lR"&&$2<='${p[25]}';$1~"li"&&$3!~"wpa2";' ' BEGIN { FS=":";p="uniq -c|sed -E '"'s/ +\$[0-9]+\$\$.+\$/\\\2 x\\\1/;s/x1$//'"'";} { n=split($3,a,".");sub(/_2[01].+/,"",$3);print $2" "$3" "a[n]$1|p;b=b$1;} END { close(p);if(b) print("\n\t* Code injection");} ' ' NR!=4{next} {$NF/=10240} '"`S0 27 14`" ' END { if($3~/[0-9]/)print$3;} ' ' BEGIN { L='${p[36]}';} !/^[[:space:]]*(#.*)?$/ { l++;if(l<=L) f=f"\n "$0;} END { F=FILENAME;if(!F) exit;if(!f) f="\n [N/A]";"cksum "F|getline C;split(C, A);C="checksum "A[1];"file -b "F|getline T;if(T!~/^(AS.+ (En.+ )?text(, with v.+)?$|(Bo|PO).+ sh.+ text ex|XM)/) F=F" ("T", "C")";else F=F" ("C")";printf("\nContents of %s\n%s\n",F,f);if(l>L) printf("\n ...and %s more line(s)\n",l-L);} ' ' s/^ ?n...://p;s/^ ?p...:/-'$'\t''/p;' 's/0/Off/p' ' END{print NR} ' ' /id: N|te: Y/{i++} END{print i} ' ' / / { print "'"${p[28]}"'";exit;};1;' '/ en/!s/\.//p' ' NR!=13{next};{sub(/[+-M]$/,"",$NF)};'"`S0 39 40`" ' $10~/\(L/&&$9!~"localhost" { sub(/.+:/,"",$9);print $1": "$9;} ' '/^ +r/s/.+"(.+)".+/\1/p' 's/(.+\.wdgt)\/(Contents\/)?Info\.plist$/\1/p' 's/^.+\/(.+)\.wdgt$/\1/p' ' /l: /{ /DVD/d;s/.+: //;b0'$'\n'' };/s: /{ /V/d;s/^ */- /;H;};$b0'$'\n'' d;:0'$'\n'' x;/APPLE [^:]+$/d;p;' ' /^find: /d;p;' "`S0 44 45`" ' BEGIN{FS="= "} /Path/{print $2} ' ' /^ *$/d;s/^ */ /;' ' /:/d;/\./p;' '/\.appex\/Contents\/Info\.plist$/p' );c1=(system_profiler pmset\ -g nvram fdesetup find syslog df vm_stat sar ps sudo\ crontab sudo\ iotop top pkgutil 'PlistBuddy 2>&1 -c "Print' whoami cksum kextstat launchctl sudo\ launchctl crontab 'sudo defaults read' stat lsbom mdfind ' for i in ${p[24]};do ${c1[18]} ${c2[27]} $i;done;' defaults\ read scutil sudo\ dtrace sudo\ profiles sed\ -En awk /S*/*/P*/*/*/C*/*/airport networksetup mdutil sudo\ lsof test osascript\ -e );c2=(com.apple.loginwindow\ LoginHook '" /L*/P*/loginw*' "'tell app \"System Events\" to get properties of login items'|tr , \\\n" 'L*/Ca*/com.ap*.Saf*/E*/* -d 1 -name In*t -exec '"${c1[14]}"' :CFBundleDisplayName" {} \;|sort|uniq' '~ $TMPDIR.. $ -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 $' '.??* -path .Trash -prune -o -type d -name *.app -print -prune' :${p[35]}\" :Label\" '{/,}L*/{Con,Pref}* -type f ! -size 0 -name *.plist -exec plutil -s {} \;' "-f'%N: %l' Desktop L*/Keyc*" therm sysload boot-args status " -F '\$Time \$Message' -k Sender kernel -k Message Req 'bad |Beac|caug|corru|dead[^bl]|FAIL|fail|GPU |hfs: Ru|inval|jnl:|last value [1-9]|n Cause: -|NVDA$|pagin|proc: t|Roamed|rror|ssert|Thrott|tim(ed? ?|ing )o|WARN' -k Message Rne 'Goog|ksadm|SMC:|suhel| VALI|ver-r|xpma' -o -k Sender fseventsd -k Message Req 'SL' " '-du -n DEV -n EDEV 1 10' 'acrx -o comm,ruid,%cpu' '-t1 10 1' '-f -pfc /var/db/r*/com.apple.*.{BS,Bas,Es,J,OSXU,Rem,up}*.bom' '{/,}L*/Lo*/Diag* -type f -regex .\*[cght] ! -name .?\* ! -name \*ag \( -exec grep -lq "^Thread c" {} \; -exec printf \* \; -o -true $ -execdir stat -f:%Sc:%N -t%F {} \;|sort -t: -k2 |tail -n'${p[38]} '/S*/*/Ca*/*xpc* >&- ||echo No' '-L /{S*/,}L*/StartupItems -type f -exec file {} +' '-L /S*/L*/{C*/Sec*A,Ex}* {/,}L*/{A*d,Ca*/*/Ex,Co{mpon,reM},Ex,In{p,ter},iTu*/*P,Keyb,Mail/B,Pr*P,Qu*T,Scripti,Sec,Servi,Spo,Widg}* -path \\*s/Resources -prune -o -type f -name Info.plist' '/usr/lib -type f -name *.dylib' `awk "${s[31]}"<<<${p[23]}` "/e*/{auto,{cron,fs}tab,hosts,{[lp],sy}*.conf,mach_i*/*,pam.d/*,ssh{,d}_config,*.local} {,/usr/local}/etc/periodic/*/* /L*/P*{,/*}/com.a*.{Bo,sec*.ap}*t {/S*/,/,}L*/Lau*/*t .launchd.conf" list getenv /Library/Preferences/com.apple.alf\ globalstate --proxy '-n get default' -I --dns -getdnsservers\ "${p[N5]}" -getinfo\ "${p[N5]}" -P -m\ / '' -n1 '-R -l1 -n1 -o prt -stats command,uid,prt' '--regexp --only-files --files com.apple.pkg.*|sort|uniq' -kl -l -s\ / '-R -l1 -n1 -o mem -stats command,uid,mem' '+c0 -i4TCP:0-1023' com.apple.dashboard\ layer-gadgets '-d /L*/Mana*/$USER&&echo On' '-app Safari WebKitDNSPrefetchingEnabled' "+c0 -l|awk '{print(\$1,\$3)}'|sort|uniq -c|sort -n|tail -1|awk '{print(\$2,\$3,\$1)}'" 'L*/P*/com.ap*.p*.ext*.*.*t -exec '"${c1[14]}"' :displayOrder" {} \;' );N1=${#c2[@]};for j in {0..9};do c2[N1+j]=SP${p[j]}DataType;done;N2=${#c2[@]};for j in 0 1;do c2[N2+j]="-n ' syscall::'${p[33+j]}':return { @out[execname,uid]=sum(arg0) } tick-10sec { trunc(@out,1);exit(0);} '";done;l=(Restricted\ files Hidden\ apps 'Elapsed time (s)' POST Battery Safari\ extensions Bad\ plists 'High file counts' User Heat System\ load boot\ args FileVault Diagnostic\ reports Log 'Free space (MiB)' 'Swap (MiB)' Activity 'CPU per process' Login\ hook 'I/O per process' Mach\ ports kexts Daemons Agents XPC\ cache Startup\ items Admin\ access Root\ access Bundles dylibs Apps Font\ issues Inserted\ dylibs Firewall Proxies DNS TCP/IP Wi-Fi Profiles Root\ crontab User\ crontab 'Global login items' 'User login items' Spotlight Memory Listeners Widgets Parental\ Controls Prefetching SATA Descriptors appexes );N3=${#l[@]};for i in 0 1 2;do l[N3+i]=${p[5+i]};done;N4=${#l[@]};for j in 0 1;do l[N4+j]="Current ${p[29+j]}stream data";done;A0() { id -G|grep -qw 80;v[1]=$?;((v[1]==0))&&sudo true;v[2]=$?;v[3]=`date +%s`;clear >&-;date '+Start time: %T %D%n';};for i in 0 1;do eval ' A'$((1+i))'() { v=` eval "${c1[$1]} ${c2[$2]}"|'${c1[30+i]}' "${s[$3]}" `;[[ "$v" ]];};A'$((3+i))'() { v=` while read i;do [[ "$i" ]]&&eval "${c1[$1]} ${c2[$2]}" \"$i\"|'${c1[30+i]}' "${s[$3]}";done<<<"${v[$4]}" `;[[ "$v" ]];};A'$((5+i))'() { v=` while read i;do '${c1[30+i]}' "${s[$1]}" "$i";done<<<"${v[$2]}" `;[[ "$v" ]];};';done;A7(){ v=$((`date +%s`-v[3]));};B2(){ v[$1]="$v";};for i in 0 1;do eval ' B'$i'() { v=;((v['$((i+1))']==0))||{ v=No;false;};};B'$((3+i))'() { v[$2]=`'${c1[30+i]}' "${s[$3]}"<<<"${v[$1]}"`;} ';done;B5(){ v[$1]="${v[$1]}"$'\n'"${v[$2]}";};B6() { v=` paste -d: <(printf "${v[$1]}") <(printf "${v[$2]}")|awk -F: ' {printf("'"${f[$3]}"'",$1,$2)} ' `;};B7(){ v=`grep -Fv "${v[$1]}"<<<"$v"`;};C0() { [[ "$v" ]]&&sed -E "$s"<<<"$v";};C1() { [[ "$v" ]]&&printf "${f[$1]}" "${l[$2]}" "$v"|sed -E "$s";};C2() { v=`echo $v`;[[ "$v" != 0 ]]&&C1 0 $1;};C3() { v=`sed -E "${s[63]}"<<<"$v"`&&C1 1 $1;};for i in 1 2;do for j in 0 2 3;do eval D$i$j'(){ A'$i' $1 $2 $3; C'$j' $4;};';done;done;{ A0;D20 0 $((N1+1)) 2;D10 0 $N1 1;B0;C2 27;B0&&! B1&&C2 28;D12 15 37 25 8;A1 0 $((N1+2)) 3;C0;D13 0 $((N1+3)) 4 3;D23 0 $((N1+4)) 5 4;D13 0 $((N1+9)) 59 50;for i in 0 1 2;do D13 0 $((N1+5+i)) 6 $((N3+i));done;D13 1 10 7 9;D13 1 11 8 10;D22 2 12 9 11;D12 3 13 10 12;D23 4 19 44 13;D23 5 14 12 14;D22 6 36 13 15;D22 7 37 14 16;D23 8 15 38 17;D22 9 16 16 18;B1&&{ D22 35 49 61 51;D22 11 17 17 20;for i in 0 1;do D22 28 $((N2+i)) 45 $((N4+i));done;};D22 12 44 54 45;D22 12 39 15 21;A1 13 40 18;B2 4;B3 4 0 19;A3 14 6 32 0;B4 0 5 11;A1 17 41 20;B7 5;C3 22;B4 4 6 21;A3 14 7 32 6;B4 0 7 11;B3 4 0 22;A3 14 6 32 0;B4 0 8 11;B5 7 8;B1&&{ A2 19 26 23;B7 7;C3 23;};A2 18 26 23;B7 7;C3 24;D13 4 21 24 26;B4 4 12 26;B3 4 13 27;A1 4 22 29;B7 12;B2 14;A4 14 6 52 14;B2 15;B6 14 15 4;B3 0 0 30;C3 29;A1 4 23 27;B7 13;C3 30;B3 4 0 65;A3 14 6 32 0;B4 0 16 11;A1 4 50 64;B7 16;C3 52;D13 24 24 32 31;D13 25 37 32 33;A2 23 18 28;B2 16;A2 16 25 33;B7 16;B3 0 0 34;B2 21;A6 47 21&&C0;B1&&{ D13 21 0 32 19;D13 10 42 32 40;D22 29 35 46 39;};D23 14 1 62 42;D12 34 43 53 44;D12 22 20 32 25;D22 0 $((N1+8)) 51 32;D13 4 8 41 6;D12 26 28 35 34;D13 27 29 36 35;A2 27 32 39&&{ B2 19;A2 33 33 40;B2 20;B6 19 20 3;};C2 36;D23 33 34 42 37;B1&&D23 35 45 55 46;D23 32 31 43 38;D12 36 47 32 48;D13 20 42 32 41;D13 37 2 48 43;D13 4 5 32 1;D13 4 3 60 5;D12 26 48 49 49;B3 4 22 57;A1 26 46 56;B7 22;B3 0 0 58;C3 47;D22 4 4 50 0;D23 22 9 37 7;A7;C2 2;} 2>/dev/null|pbcopy;exit 2>&-
Copy the selected text to the Clipboard by pressing the key combination command-C.
8. Launch the built-in Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
Click anywhere in the Terminal window and paste by pressing command-V. The text you pasted should vanish immediately. If it doesn't, press the return key.
9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter
exec bash
and press return. Then paste the script again.
10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. In most cases, the difference is not important. If you don't know the password, or if you prefer not to enter it, press the key combination control-C or just press return three times at the password prompt. Again, the script will still run.
If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.
11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, there will be nothing in the Terminal window and no indication of progress. Wait for the line
[Process completed]
to appear. If you don't see it within half an hour or so, the test probably won't complete in a reasonable time. In that case, close the Terminal window and report what happened. No harm will be done.
12. When the test is complete, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.
At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.
If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.
13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "You are not authorized to post." That's a bug in the forum software. Please post the test results on Pastebin, then post a link here to the page you created.
14. This is a public forum, and others may give you advice based on the results of the test. They speak only for themselves, and I don't necessarily agree with them.
Copyright © 2014 by Linc Davis. As the sole author of this work, I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

Wipe a HD via Unix in Single User Mode?

Is it possible to wipe a hard drive using diskutil or another method when booting up in Single User Mode? We routinely need to wipe drives and if possible, this would be the easiest.
I suspect because the OS that boots in Single User Mode is on that same drive will make this impossible.
Thanks in advance for your tips and comments,
Doug

Yes, you cannot erase an OS while it's 'hosting' the erasure. Single user mode is part of Mac OS X, so it's on the hard drive, not in the firmware or anything super-low-level like that. Oh well. So... you might be able to erase the vast majority of user, application, and even OS files, but it won't be complete and won't be 'as good as' a volume-format.
A couple alternatives come to mind (sorry if you know all this. Not trying to be pedantic or patronizing, just making sure you know your options).
We keep host computers around just for running wipes, backups, and diagnostics that cannot run from a drive holding the booted OS. You simply restart the to-be-wiped Mac holding the 't' key, connect it via firewire, and treat it as an external hard drive.
You could also just boot from a Mac OS X install disc and wipe from the copy of Disk Utility included on the disc. Better yet, throw a +bona fide+ copy of OS X onto a pocket hard drive, boot the victim-Mac from that (hold option while it is first starting up), and wipe the internal HD normally, now that it's not in use. You could maybe even use single user mode in the booting OS, like you'd imagined, and format from there (I'm not sure that would be faster than letting it boot normally, though, as you might have to use "dd" or some other similar low-level wipe method, as I don't think the frameworks required for Apple's cli "diskutil" are available in single user mode).
I haven't tried to use it on a Mac, but I have a 256 MB USB flash drive with, er, ['Darn' Small Linux|http://tinyurl.com/5md7t] on it for diagnosing Windows boxes. It runs a script on boot which, if you don't intervene to run utilities or what-have-you, will wipe all attached hard drives and shut down. I keep it locked up for understandable reasons, but its super useful just as a time-saver, booting most machines and beginning the countdown-to-wipe in under ten seconds.
Anyway, let us know what your goals and thoughts are.
Cheers, Joel

Single user mode USB support

Similar Messages

Maybe you are looking for