# linux-apfs-rw: reconstructing APFS support in a Linux kernel module

> linux-apfs-rw reconstructs support for Apple's APFS filesystem in a Linux kernel module using reverse-engineered format knowledge and an incomplete official specification. It mounts APFS volumes read-only by default and offers experimental writes, snapshot mounting and metadata checksum checking.

- Type: Case study
- Targets: Binary
- Category: Independent reconstruction cases
- Relationship: Independent reconstruction project
- Sources reviewed: 2026-11-09
- Added to the catalog: 2026-11-09
- Original resource: <https://github.com/linux-apfs/linux-apfs-rw>
- Primary source: <https://github.com/linux-apfs/linux-apfs-rw/blob/cb9c0a0681923eaa090026b4c9357e139dfb355b/README.rst>
- Catalog page: <https://awesomerea.org/resources/linux-apfs-rw-case/>
- Record JSON: <https://awesomerea.org/resources/linux-apfs-rw-case/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/linux-apfs-rw-case/index.md)

## Requirements & limits

- **Prerequisites:** Linux kernel 4.12 or later, matching kernel headers, and an APFS device or filesystem image.
- **Limits:** Write support is experimental and may corrupt data; encryption is not implemented.
- **License:** GPL-2.0 license.

## Primary sources

1. <https://github.com/linux-apfs/linux-apfs-rw/blob/cb9c0a0681923eaa090026b4c9357e139dfb355b/README.rst>

## More in Native binaries

- [Ghidra](https://awesomerea.org/resources/ghidra/index.md) · Tool
- [radare2](https://awesomerea.org/resources/radare2/index.md) · Tool
- [Cutter](https://awesomerea.org/resources/cutter/index.md) · Tool
- [Qiling](https://awesomerea.org/resources/qiling/index.md) · Tool
- [Unicorn Engine](https://awesomerea.org/resources/unicorn/index.md) · Tool
- [angr](https://awesomerea.org/resources/angr/index.md) · Tool

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.