SSH Ramdisk Script

Create and boot a SSH ramdisk on checkm8 devices

---

About this Fork

This fork differs from verygenericname's version in the following ways:

• Supports offline IPSW files for ramdisk creation.
• Automatically saves a copy of generated ramdisk files to:

  ramdisk/<model>_<version>/
  

---

Prerequisites

1. A computer running macOS or Linux
2. A checkm8-compatible device (A7–A11)

Usage

1. Clone and enter the repository:

   git clone https://github.com/kagbontaen/SSHRD_Script --recursive && cd SSHRD_Script

   If previously cloned:

   cd SSHRD_Script && git pull

2. Run the ramdisk creation command:

   ./sshrd.sh <iOS version>

   • The iOS version does not need to match the device, but SEP must be compatible.
   • Linux users: iOS 16.1+ ramdisks cannot be created due to APFS changes; use 16.0 or lower.

3. Place your device into DFU mode.

   • A11 devices: Recovery Mode → DFU.

4. Boot the SSH ramdisk:

   ./sshrd.sh boot

5. Connect via SSH:

   ./sshrd.sh ssh

6. Mount filesystems:

   mount_filesystems

   • /var mounts to /mnt2
   • /private/preboot mounts to /mnt6
   • Do NOT run this on very old iOS versions.

Linux Notes

On Linux, usbmuxd must be restarted. Run these in another terminal:

sudo systemctl stop usbmuxd
sudo usbmuxd -p -f

Other Commands

• Reboot device: ./sshrd.sh reboot
• Erase all data: ./sshrd.sh reset
• Dump onboard SHSH blobs: ./sshrd.sh dump-blobs
• Delete old ramdisk: ./sshrd.sh clean

---

Other Resources

• Reddit Post

---

Credits

• remote-zip-viewer.py (from the remote-zip-downloader project)
• tihmstar — pzb, original iBoot64Patcher, img4tool
• xerub — img4lib, restored_external
• Cryptic — iBoot64Patcher fork
• opa334 — TrollStore
• Nebula — QOL fixes
• OpenAI — kerneldiff → C port
• Ploosh — KPlooshFinder