Important! Newer Mac hardware (e.g. T2/M1 chips) do not run Linux well, or at all. This is true for Linux in general, not just for Kali Linux. The model & year of the device will determine how successful our experience will be. Please check this link for more details.
This article will show us to dual-boot Apple's macOS/OS X with Kali Linux using rEFInd boot manager. If we want to replace macOS/OS X completely, please refer to our single boot Kali on Mac hardware guide.
By using using the 3rd party boot manager rEFInd (a fork of rEFIt) we are able to increase our control when booting over macOS/OS X OS’s default option. This makes it perfect for dual booting, as a keyboard shortcut does not need to be used every time the device is powered on to boot Kali Linux. rEFInd also has the advantage of helping older hardware to boot from USB devices that would not be able to otherwise (e.g. non-EFI). Once Kali Linux has been installed, rEFInd can be customized to be hidden during boot or removed completely.In our example, we will be installing Kali Linux on a Mac Mini (Mid 2011) using macOS High Sierra (10.13). The same procedure has also been tested on a Mac Book Air (Early 2014) using macOS Catalina (10.15).
Installation Prerequisites
This guide will make the following assumptions:
- Already read our single boot Kali Linux install guide, as this has the same Installation Prerequisites (System requirements & setup assumptions).
- When downloading Kali Linux, pick the live image, rather than the installer option.
- A single disk to install to (rather than a dedicated disk per operating system).
- Currently running macOS/OS X 10.7 or higher (later versions are more preferred) as this means the hardware is Intel (and not a PowerPC CPU).
- Depending on the Mac hardware model & year, we may find:
- Different results when trying to boot by using either a CD/DVD or a USB drive.
- We may be able to increase the chances of booting (especially older hardware and non-EFI) from a USB drive by having rEFInd pre-installed.
- When using the graphical installer, we may notice the tracepad does not function (but will after Kali Linux is installed).
- In-built wireless may not work, as
firmware-b43-installer
is not included in the default images.
- Different results when trying to boot by using either a CD/DVD or a USB drive.
- Changing or removing the desktop environment.
- Installing or removing any metapackages.
Both of these can be addressed post installation, as it saves swapping to the installer image (as we will need either multiple CD/DVD/USBs or to re-image half way though).
This
installation has the potential to go wrong very easily as it involves
editing existing partitions. Be aware of what partitions we are
modifying and where we are installing Kali Linux to.
Having a backup of our macOS/OS X files available is a good idea in the event something goes wrong.
Resize macOS/OS X Procedure
Before we can install Kali Linux, there needs to be room on the hard disk. Depending on the format of the macOS/OS X partition, will depend on what method we need to do.
- If macOS/OS X Sierra (10.12) and earlier, it will be Mac OS Extended (HFS+).
- We can resize using GParted in from a Kali Linux live session
- Since macOS/OS X High Sierra (10.13) and later, the default will be Apple File System (APFS).
- We can resize in a normal macOS/OS X session, or in recovery mode (recommended).
HFS+/GParted
- To start resizing, make sure we insert our Kali Linux installation medium and power on the device. Immediately press and hold the Option (or Alt) ⌥ key until we see the boot menu (rEFInd if installed, else the default macOS/OS X). We may or may not have a Recovery HD depending on our macOS/OS X setup.
- When the boot menu appears, if everything works as expected, we should see two volumes:
- EFI Boot - Newer hardware which support UEFI. It is common for GUID Partition Table (GPT) partitions to be used.
- Windows - “Non-EFI” boot. This use on older hardware which uses BIOS. We often see Master Boot Record (MBR) partition tables here.
If we only see one volume (EFI Boot), then the installation media is not supported for this device. This could be because the age of the firmware on the device.
We may wish to install rEFInd, as it is a boot manager, and try again.
Even though Kali Linux is based on Debian, macOS/OS X always detects non-EFI boot media as Windows. We suggest that we select the EFI Boot volume to continue. However, if the installation hangs at this point, power cycle and select Windows (Being Kali Linux non-EFI/BIOS). The success depends on the Mac hardware’s model & year.
- We should be greeted with the Kali Linux boot screen. Select Live, and we should be booted into the Kali Linux default desktop.
- Now launch GParted, which we’ll use to shrink the existing macOS/OS X partition to give us enough room to install Kali Linux in the free space.
- Once GParted has opened, select our macOS/OS X partition & resize it leaving enough space (we recommend at least 20 GB) for the Kali Linux installation.
Depending on our setup, it is often the second option (the largest partition). In our example, there are three partitions:
- The EFI upgrade partition (
/dev/sda1
) - macOS/OS X’s main operating system (
/dev/sda2
) - System Recovery (
/dev/sda3
)
If we are moving past into any non-white in the partition then we are editing a section that is in use.
Only remove from the area of the partition that is not in use.
It is alright to leave the third partition (/dev/sda3
), and only shrink the actual install (/dev/sda2
).
Ifwe wish to organize the partition to group all the macOS/OS X partitions together, placing the free space at the end, we may do so.
- Once we have resized our macOS/OS X partition, ensure we “Apply All Operations” on the hard disk. Exit gparted and reboot.
APFS/Recovery
This can be doing using either the command line, or graphical (using Disk Utility). Both option support resizing in a “normal” session, or booting into recovery mode. Using recovery mode, means the drive is not in use, so would reduce of the chances of issues. We would also recommend using the command line method, as it allows for a empty partition to be created which simplifies the setup process later on.
To get to command line access: Spotlight->Terminal
By using
diskutil list
, we can see our disk we want to resize isdisk0s2
, and it is ~500GB.
$ diskutil list
/dev/disk0 (internal, physical):
#: TYPE NAME SIZE IDENTIFIER
0: GUID_partition_scheme *500.1 GB disk0
1: EFI EFI 209.7 MB disk0s1
2: Apple_APFS Container disk1 499.9 GB disk0s2
/dev/disk1 (synthesized):
#: TYPE NAME SIZE IDENTIFIER
0: APFS Container Scheme - +499.9 GB disk1
Physical Store disk0s2
1: APFS Volume Macintosh HD 16.6 GB disk1s1
2: APFS Volume Preboot 21.4 MB disk1s2
3: APFS Volume Recovery 516.2 MB disk1s3
4: APFS Volume VM 20.5 KB disk1s4
$
- We want to reduce the 500GB to be 400GB. This would give Kali Linux 100GB (we recommend at least 20 GB).
$ sudo diskutil apfs resizeContainer disk0s2 400g
Password:
Started APFS operation
Aligning shrink delta to 99,898,105,856 bytes and targeting a new physical store size
of 400,000,000,000 bytes
Determined the minimum size for the targeted physical store of this APFS Container
to be 17,949,245,440 bytes
Resizing APFS Container designated by APFS Container Reference disk1
The specific APFS Physical Store being resized is disk0s2
Verifying storage system
Using live mode
Performing fsck_apfs -n -x -l /dev/disk0s2
Checking volume
Checking the container superblock
Checking the EFI jumpstart record
Checking the space manager
Checking the object map
Checking the APFS volume superblock
Checking the object map
Checking the fsroot tree
Checking the snapshot metadata tree
Checking the extent ref tree
Checking the snapshots
Checking the APFS volume superblock
Checking the object map
Checking the fsroot tree
Checking the snapshot metadata tree
Checking the extent ref tree
Checking the snapshots
Checking the APFS volume superblock
Checking the object map
Checking the fsroot tree
Checking the snapshot metadata tree
Checking the extent ref tree
Checking the snapshots
Checking the APFS volume superblock
Checking the object map
Checking the fsroot tree
Checking the snapshot metadata tree
Checking the extent ref tree
Checking the snapshots
Verifying allocated space
The volume /dev/disk0s2 appears to be OK
Storage system check exit code is 0
Shrinking APFS Physical Store disk0s2 from 499,898,105,856 to 400,000,000,000 bytes
Shrinking APFS data structures
Shrinking partition
Modifying partition map
Finished APFS operation
$
- Quickly checking
diskutil list
again, we can see it has been successful.
$ diskutil list
/dev/disk0 (internal, physical):
#: TYPE NAME SIZE IDENTIFIER
0: GUID_partition_scheme *500.1 GB disk0
1: EFI EFI 209.7 MB disk0s1
2: Apple_APFS Container disk1 400.0 GB disk0s2
/dev/disk1 (synthesized):
#: TYPE NAME SIZE IDENTIFIER
0: APFS Container Scheme - +400.0 GB disk1
Physical Store disk0s2
1: APFS Volume Macintosh HD 16.6 GB disk1s1
2: APFS Volume Preboot 21.4 MB disk1s2
3: APFS Volume Recovery 516.2 MB disk1s3
4: APFS Volume VM 20.5 KB disk1s4
$
Kali Linux Installation Procedure
- The installation procedure from this point onwards is similar to a Kali Linux Hard Disk install, until the point of the partitioning. At this point, we need to select “Guided - use the largest continuous free space” (rather than “Guided - the entire disk”) which got created earlier with gparted.
Do not forget we may need to press and hold the Option (or Alt) ⌥ key during the startup to see the boot menu (unless we have rEFInd installed).
- We can carry on following the single boot Kali Linux install guide, expect we will not have the option to select desktop environment or metapackages as we are using the live image. Once the installation is done, reboot.
By default, macOS/OS X will boot into itself, rather than any other operating system/install media. As we have done it already a few times, we need to hold the Option (or Alt) ⌥ key. Whilst this “works”, but its not ideal as it is easy to not boot anything other tha macOS/OS X. Enter rEFInd, a replacement boot manager (which can also have themes applied).
Installing rEFInd
rEFInd is a boot manager, replacing the limiting default one with macOS/OS X, allowing for greater options. It can be installed either before or after Kali Linux’s installation, as well as from macOS/OS X or Kali Linux.
Since the release of macOS/OS X El Capitan (10.11), an additional security feature got introduced, System Integrity Protection (SIP). To install rEFInd using macOS/OS X, this first needs to be one-time bypassed (recommended), or disabled. Alternatively rEFInd can be installed using Kali Linux (we recommended todo so after when Kali Linux is installed rather than using live mode).
Installing rEFInd using macOS/OS X
rEFInd cannot easily be downloaded when in recovery mode, as there is limited space and tools/libraries available (e.g. curl does not support https). As a result, we will download rEFInd inside of a normal macOS/OS X session and afterwards reboot to recovery mode to install.
At the time of this writing, the latest version of rEFInd is 0.12.0.
- We will start off by downloading rEFInd, check its a valid zip file, and then extract.
$
$ file Downloads/refind.zip
Downloads/refind.zip: Zip archive data, at least v1.0 to extract
$
$ unzip -q -d Downloads/ Downloads/refind.zip
$
$ ls Downloads/
refind-bin-0.12.0 refind.zip
$
- We are going to restarting macOS/OS X, and press the Command (⌘) and R keys at the same time, until we see a boot logo. At this point, if there is a firmware password, we will need to enter it in order to continue.
This will bypass SIP by using macOS/OS X’s Recovery System version which is in-built to the firmware (so no Internet connection is required).
- When recovery mode has fully loaded, from the menu: Utilities->Terminal.
- Afterwards, we need to navigate to the extracted folder.
The path will be different, as its based on the label of the hard disk (in our case, Macintosh HD
) and username (username
) and version of rEFInd (0.12.0
)
# cd /Volumes/Macintosh\ HD/Users/username/Downloads/refind-bin-0.12.0/
#
# pwd
/Volumes/Macintosh HD/Users/username/Downloads/refind-bin-0.12.0
#
- Execute shell script
refind-install
.
Even though we are in recovery, where SIP is not running, rEFInd still believes it is. We will overwrite this.
# ./refind-install
ShimSource is none
Installing rEFInd on macOS....
Installing rEFInd to the partition mounted at /Volumes/ESP
**** ALERT: SIP ENABLED! ****
rEFInd cannot be installed because System Integrity Protection (SIP) seems
to be enabled! You must install rEFInd from your Recovery installation or
from another OS. To install from the Recovery system:
1. Reboot
2. Hold down Command+R as the chime sounds
3. When the OS has booted, select Utilities->Terminal
4. Change to this directory with the 'cd' command; it will probably be under
/Volumes/Macintosh HD/Users/username/Downloads/refind-bin-0.12.0
5. Re-run this script.
If you believe SIP is NOT enabled, you may attempt an installation anyhow,
but it may fail.
For more on this subject, see http://www.rodsbooks.com/refind/sip.html
Do you want to attempt installation (Y/N)? y
Copied rEFInd binary files
Copying sample configuration file as refind.conf; edit this file to configure
rEFInd.
#
- Reboot macOS/OS X. From the menu: Apple->Restart.
- Upon restart we should see the new boot manager, rEFInd.
Installing rEFInd using Kali Linux
rEFInd is also included with Kali Linux. We can quickly install it by doing the following:
kali@kali:~$ sudo apt update
kali@kali:~$
kali@kali:~$ sudo apt install -y refind
During the installation, we will get a prompt saying about automatically running rEFInd. We recommend we press yes, otherwise we will need to run sudo dpkg-reconfigure refind
(or sudo refind-install
) afterwards.
┌────────────────────────┤ Configuring refind ├────────────────────────┐
│ │
│ It is necessary to install rEFInd to the EFI System Partition (ESP) │
│ for it to control the boot process. │
│ │
│ Not installing the new rEFInd binary on the ESP may leave the │
│ system in an unbootable state. Alternatives to automatically │
│ installing rEFInd include running /usr/sbin/refind-install by hand │
│ or installing the rEFInd binaries manually by copying them from │
│ subdirectories of /usr/share/refind-{version}. │
│ │
│ Automatically install rEFInd to the ESP? │
│ │
│ <Yes> <No> │
│ │
└──────────────────────────────────────────────────────────────────────┘
...
ShimSource is none
Installing rEFInd on Linux....
ESP was found at /boot/efi using vfat
Installing driver for ext4 (ext4_x64.efi)
Copied rEFInd binary files
Copying sample configuration file as refind.conf; edit this file to configure
rEFInd.
Creating new NVRAM entry
rEFInd is set as the default boot manager.
Creating //boot/refind_linux.conf; edit it to adjust kernel options.
kali@kali:~$
Upon restart we should see the new boot manager, rEFInd.
Configuring rEFInd
If we need, we can alter rEFInd in various ways now, including:
- The default OS selection
- Timeout for menu selection
- Direct boot into the default OS (Note, by pressing Option (or Alt) ⌥ key during boot, we will have a one-time boot menu).
- Adding custom icons/themes.
refind.conf
macOS/OS X El Capitan
Ifwe wish to make any of these alterations, this can be done by editing rEFInd’s configuration file. If we are using macOS/OS X El Capitan (10.11) or later, we need to mount the EFI boot volume first to access the file. This is done by doing the following:
$ cd ~/Downloads/refind-bin-*/
$
$ sudo ./mountesp
The ESP has been identified as /dev/disk0s1; attempting to mount it....
The ESP is mounted at /Volumes/ESP
username@Usernames-Mac refind-bin-0.12.0 %
$
$ vim /Volumes/ESP/EFI/refind/refind.conf
$
macOS/OS X Yosemite
If we are using macOS/OS X Yosemite (10.10) or earlier, the configuration file is located here as no mounting is required.
$ sudo vim /EFI/refind/refind.conf
Kali Linux
On Kali Linux, the configuration file is found in the following location.
kali@kali:~$ sudo vim /boot/efi/EFI/refind/refind.conf
kali@kali:~$
Post Installation
This is how we can install Kali Linux on our MacBook with dual boot. Here the guide is ended. This guide is heavily inspired from Kali's official dualboot on Mac guide. Now it’s time to customize our system.