client: Enable Keybase in Finder doesn't work in macOS Big Sur 11.0.1
After upgrading to macOS Big Sur 11.0.1, Keybase client is not working with Finder, and enabling does not work. In main app, select Files tab; “Enable Keybase in Finder?” should show at the top. Click to accept “I understand that closed source…”, and push “Yes, enable” button.
Result: After working for a few seconds, nothing changes and “Yes, enable” button is enabled again. Attempting to navigate to any keybase managed files gives permission denied.
Keybase client for macOS 5.5.0-20200526170801+139bb348af (installed via brew). kbfuse version is 10.11 with symlinks for higher versions.
❯ ll /Library/Filesystems/kbfuse.fs/Contents/Extensions/
total 0
drwxr-xr-x@ 3 root wheel 96B May 26 13:19 10.11/
lrwxr-xr-x 1 root wheel 5B May 26 13:19 10.12@ -> 10.11
lrwxr-xr-x 1 root wheel 5B May 26 13:19 10.13@ -> 10.11
lrwxr-xr-x 1 root wheel 5B May 26 13:19 10.14@ -> 10.11
lrwxr-xr-x 1 root wheel 5B May 26 13:19 10.15@ -> 10.11
About this issue
- Original URL
- State: closed
- Created 4 years ago
- Reactions: 32
- Comments: 57
Commits related to this issue
- Update README.md Since support for macOS Big Sur was allegedly dropped from the code, it's best to update the README.md to reflect the policy change. Note that I personally disagree with that appr... — committed to GwynethLlewelyn/client by GwynethLlewelyn 2 years ago
- dont foget kbfuse bundle — committed to keybase/client by mmaxim 2 years ago
I’m on Big Sur 11.1 and tried the various symlinks as well, without any luck. Ended up with
However, I was finally able to get it working by loading the kext via kextutil as per https://github.com/keybase/client/blob/cac9573e33f472fcb1417c1e6a899bfbba36405c/osx/Fuse/README.md
and then allowing via the Security popup.
Who knows what edge cases the creates but basic functionality works.
FWIW: I appreciate the work arounds, I prefer to confirm a real fix from keybase dev team.
Im running Keybase Version 5.5.0-20200526170801+139bb348af with macFUSE 4.0.5 and I still have the issue. I click “Enable Keybase in Finder” and it takes a few seconds for keybase to return with no Finder integration enabled. I see that I have 2 folders created in
/Volumes:Are there anyway to check the logs and see what exactly is broken?
Update Jan 13th 2021: I also managed to make it work by running the following command (like suggested in other comments) and allowing “Keybase Inc” to access the filesystem by following on popup windows that shows up:
Same here, except I had to
brew install macfuse(to 4.0.5) separately.I inspired myself from @leoluz’s instructions and replaced
kextutilbykmutilsince the former is now marked as deprecated. Here are the steps that fixed it for me:sudo kmutil load -p /Library/Filesystems/kbfuse.fs/Contents/Extensions/10.11/kbfuse.kextEnable Keybase in Finder. This time it should work.AllowLikewise, this is affecting my workflow significantly. I can’t find a workaround that works on either 11.0.1 or 11.1 😕
Same behaviour in 11.1 as noted by @kolobus. The hack from @MarcoMartins86 with macFUSE 4.0.4 doesn’t work with this version either by symlinking 10.11 to 11.1.
Both fixes above give no result on Apple M1 MB, so problem might be somewhere else, ARM- related.
Version 5.6.2 (5.6.2-20210202191343+d72cc00cd3) on macOS v11.2.2 is working correctly now. I did not create symlinks or use brew to manipulate this machine, so Keybase updater seems to have corrected things.
Version 5.6.2 worked for me on macOS 11.1 👍
Hi friends. None of these are going to work on M1 chips since M1 requires ARM64 (and the emulation for x86_64 via Rosetta2 isn’t applicable here I think). I would not recommend any of the symlinking hacks here unless you have a redundant backup of everything on the machine you’re using this on, both stuff on Keybase and local storage too. See this comment for more information there: https://github.com/keybase/client/issues/17796#issuecomment-520189673
Unfortunately since Zoom has acquired Keybase development (that we can see) has stopped, see this link showing the commit history; guess when Zoom acquired Keybase: https://github.com/keybase/client/graphs/commit-activity
Now onto my own speculation. This project is likely dead now – they haven’t addressed any meaningful issues or support tickets like these for instance – and so I’d recommend probably looking to NextCloud or Syncthing for DYI storage.
RIP.
@adamhsparks I have exactly same error on m1.
It’s just a temporary fix but following this Reddit post, updating the to newest pre-release of Fuse, and creating symlinks for
sudo ln -s 10.11 10.16andsudo ln -s 10.11 11.0seemed to work for me. I don’t think you have to do all of those steps but this method worked for me.I had this once, and for some reason rebooting once more seemed to help. Attempting to use
sshfsprior to that reboot, may or may not have contributed. (I got the “blocked system extension” popup, but couldn’t find the corresponding validation task in System Preferences — Strange…)This is still very much broken on Big Sur 11.3.1.
I see. I was using macFUSE 4.0.4 but this issue still existed. I’ll try 4.0.5 and see if it helps.
Having the same issue on Intel MacBook running macOS 11.1 Big Sur.
Yeah this ticket kind of stinks. It’s a big problem and ignored. I get it, Keybase FUSE isn’t a priority. It still hurts a lot of people’s sore little piddys. At least leave it open so people can figure out workarounds without having to look so hard for it.
@jburnett please re-open this issue that you prematurely closed two years ago. The issue is not — I repeat, not — fixed. Just because there are some workarounds (namely, going back a few versions or compiling the Keybase Client from scratch) it doesn’t mean that the mainline Keybase works.
On the other hand, I found something that the Keybase team might find interesting: FUSE-T, a kext-less way to access a FUSE filesystem. The authors on their page note that it is getting incredibly harder to support kext-base solutions on macOS, and with each new release, old kexts get broken and become harder and harder to support. This is most definitely the case with Keybase!
Their alternative? Add the FUSE API over a layer of Apple’s NFS driver. Whatever requires FUSE to work will have a drop-in compatible library; while on the filesystem side, there is no need to use any kernel functionality at all to work with the filesystem. Instead, everything gets routed through NFS. NFS, as the authors so well point out, is blindingly fast1 — that’s by design, from the 1980s, when Ethernet could only support 1 MBps and Sun workstations had to do their best with whatever they had. Of course, NFS is (unjustly) blamed for all sorts of security issues (which mostly happen because, unlike other remotely-mounted filesystems, NFS is hard to configure, and people tend to be careless about how they set up their permissions), but, in this scenario, there is no reason for worrying: everything happens locally, after all.
Using FUSE over NFS is both future-proof and legacy-proof. Apple will continue to support NFS ‘forever’, and they already have a very optimised implementation. NFS is a pretty standard protocol and will not unexpectedly change from one day to the other (not even if Apple wants that change!).
So… Keybase devs… any thoughts on this? Mind you, you’re already doing your own port/fork of an old version of macFUSE anyway.
FYI, I did check the
kbfscode, and I did make a few experiments runningkeybase+kbfsmanually (frombash), trying to forcekbfsto use whatever FUSE is installed. Unfortunately, the code provided by https://github.com/bazil/fuse will just check for OSXFUSE version 2.0 or 3.0, based on the default paths used by those versions. This is sort of ‘built-in’ (although it can be changed — in fact, the same mechanism is used by Keybase to use their own, tweaked version of FUSE, by ‘feeding’ its own directories pointing to the patched version of FUSE). Because FUSE-T works differently,kbfscannot find it anywhere in the system (although it is there); I imagine that it will require a different way of initialising things for FUSE-T. At the very least, there needs to be a way for checking for the presence of ‘something’ that provides a valid FUSE interface but doesn’t rely upon/dev/fuseexisting (because it won’t) neither on the ‘usual’ directories from which OSXFUSE/macFUSE are launched (because these won’t exist).I’m sure there must be a way to accomplish that!
1. In fact, I was utterly surprised when mounting remote shares on my humble Raspberry Pi, first via Samba, then via NFS. The purpose was to stream video from the Raspberry Pi to a not-very-smart TV; because the Pi doesn’t have much memory, I needed to mount a share from my home NAS; by default, those shares are made via Samba/SMB but there is an option to do them via NFS as well. With Samba… well, I got hiccups all the time, and eventually the Pi would give up on the attempt, and sever the connection. Even when it worked — over Wi-Fi, mind you! — video stuttered and gasped, struggling to flow through the wireless connection. After switching to NFS, not only there was an insane speed improvement, but all the stuttering magically disappeared! Talk about UDP for tackling unpredictable wireless transmissions… it actually deals with them so much better than Samba’s TCP connections!
@JPry — no, actually it’s always the same issue 😃 It has just been reported at least 20 times (as far as I’ve managed to count so far) for different versions of macOS, a few of which have been marked as ‘closed’. I posted on this thread because it explicitly mentioned macOS Big Sur in the title!
But I believe a full answer to this should require a ‘meta-thread’ — since it’s something that will happen over and over again.
I’ve still got to try out some of the above suggestions (thanks, guys, for so many helpful comments!), but I’ve noticed something that might be a deal breaker.
I’m on a venerable MacBook Pro (Retina, 15-inch, Mid 2014), which can only run Big Sur (still supported by Apple at the time of writing), unless I go crazy and crack it with the OpenCore patcher… which, at this time, I’m as yet reluctant to do.
That said, I’m using Homebrew 3.6.16-2-gf679990, which has installed keybase version 6.0.3-20221212202006+608e46df72.
All worked reasonably well until very recently, when Apple decided to bump up macOS Big Sur to 11.7.3 (20G1102). I believe that the Homebrew team also updated Keybase at around the same time.
The result? Well, it seems that there is no 11.X kernel extension any longer:
(the directory for macOS 12.X, however, seems to be quite complete).
And naturally enough, this means that
Keybase.appwill give the following installation error:At first, I thought it really was a conflict between kernel extensions, but it’s really just the macOS 11 kext that is missing. The logs are vast and show things such as:
~/Library/Logs/keybase.kbfs.log~/Library/Logs/Keybase.app.log~/Library/Logs/keybase.kbfs.log~/Library/Logs/keybase.service.logFYI,
keybase fuse statusoutputs:… which, as said, doesn’t contain an extension for macOS 11 (Big Sur). This is actually missing from the bundled installer itself:
Granted, I can retrieve the ‘old’ version (11) from previous versions, but I haven’t tried it out. BTW, the bundled
kbfuseis clearly meant to be used with macOS 12.3 and higher, as can be seen inside itsInfo.plist:(see the Apple documentation on
LSMinimumSystemVersion)This is a recent change (https://github.com/keybase/client/pull/25338 and https://github.com/keybase/client/commit/4c62f42b5c0730086277f8edbe001e91f1da8e16), which not even the Homebrew maintainers have noticed: when upgrading to macfuse 4.4.1, @mmaxim bumped the supported version to macOS 12, and unfortunately dropped support for Big Sur (even though
macfuseitself supports 10.9 to 13.You don’t need to have any workarounds.
All you have to do is change startup Security Utility to set the security policy to Reduced Security and select the “Allow user management of kernel extensions from identified developers” checkbox.
Please follow the below steps.
this should work without upgrading the os. i fear programmed obsolescence. my laptop works fine as it is.
Same for me, As today i’m still not able to enable finder extension with keybase 5.9.0 in Monterey 12.1 …
brew install macfusedid not help.brew install sshfsgives:Error: sshfs has been disabled because it requires closed-source macFUSE!I ran into this problem after upgrading from Catalina to Big Sur. It started working again after
brew install macfuseand then confirm in Security Settings.I have the same versions as @rjurney and am experiencing the same problem.
This is not fixed in v11.2.3 and latest Keybase Version 5.6.2-20210202191343+d72cc00cd3 (5.6.2-20210202191343+d72cc00cd3).
DAMN.
Version 5.6.2 actually broke the soft link I used to fix the issue on macOS 11.2.
5.6.2-20210202191343+d72cc00cd3 is out. Sadly no GitHub release available yet. But a screen informing about a macFuse update adding KBFS support on Big Sur + M1 macs. This probably closes this bug here along with https://github.com/keybase/keybase-issues/issues/3990. Can someone confirm?
Polecam
To add a further complication. Has Anyone have any luck with using
sudo kextutil -l /Library/Filesystems/kbfuse.fs/Contents/Extensions/10.11/kbfuse.kexton an M1 Mac?I’m still sorting mine out after receiving it yesterday, so there may be something obvious that I’m just missing.