Voilà, install macOS on ANY Computer! This is really and magic easiest way! PVE 7.XX ~ 8.XX Support and macOS High Sierra ~ macOS Sequoia Support.
Go to file
Claude 8d992802e5
Add AI Maze security architecture with Backstage + Vapor
Architecture Features:
- Security-through-obscurity using uncommon tech stack
- Backstage (Spotify) developer portal as frontend UI
- Swift/Vapor API middleware to confuse automated scanners
- Honeypot endpoints for automated scanner detection
- Multi-layer defense with firewall isolation

Components:
- ARCHITECTURE_REVIEW.md: Complete architectural review from AI engineer perspective
  - Critical findings and severity analysis
  - Domain boundary violations identified
  - Obsolete component identification (deploy-*.sh scripts)
  - BIRD2 vs GoBGP resolution strategy
  - VM vs K8s workload overlap analysis
  - Proper AI/agent architecture design (4-layer stack)
  - Clean architecture with domain separation
  - Single deployment path recommendation
  - AI inference layer proper design (Ollama + LangChain + agents)
  - Action plan for refactoring

Key Findings:
- 4 deployment scripts with overlaps → consolidate to Terraform
- VM 400/401 duplicate K8s workloads → migrate to K8s only
- "AI Agent" poorly defined → design proper inference stack
- No agentic framework → implement LangGraph + multi-agent coordination
- Documentation sprawl → consolidate to single source

Recommendations:
1. Remove: deploy-orion.sh, deploy-ai-maze.sh, deploy-ipv6-routing.sh
2. Eliminate: VM 400 (Backstage), VM 401 (Vapor) - move to K8s
3. Implement: Proper AI stack (Ollama → LangChain → Agents → Coordinator)
4. Consolidate: 9 architecture docs → 1 master ARCHITECTURE.md
5. Deploy: Single path (Terraform → Ansible → K8s)

AI/Agent Architecture (New):
- Layer 0: Inference (Ollama: llama3, codellama, mistral)
- Layer 1: Orchestration (LangChain, LangGraph)
- Layer 2: Agents (Infrastructure, Network, Security, DevOps)
- Layer 3: Multi-agent coordinator (VM 300 repurposed)

Clean separation ensures:
- Infrastructure domain (Terraform/Ansible)
- Platform domain (K8s)
- Application domain (K8s workloads)
- AI/Agent domain (proper inference stack)
- IPAM domain (NetBox)
- Observability domain (Prometheus/Grafana)

Next: Await approval to begin refactoring per review recommendations
2025-11-22 03:43:22 +00:00
.github/workflows Add GitHub Actions workflow for Python package 2025-11-19 20:12:13 -07:00
Artefacts Include backup of pve-q35-4.0.cfg 2025-04-25 16:58:53 -03:00
EFI Improvements in opencore-osx-proxmox-vm.iso 2025-04-24 10:23:27 -03:00
router-configs Integrate IPv6 BGP routing with AS394955 and prefix 2602:F674::/48 2025-11-22 02:39:02 +00:00
scripts Add Proxmox with macOS integration for Dell R730 ORION deployment 2025-11-20 00:00:20 +00:00
systemd Add Proxmox with macOS integration for Dell R730 ORION deployment 2025-11-20 00:00:20 +00:00
terraform Add comprehensive Infrastructure as Code foundation with Terraform 2025-11-22 03:19:01 +00:00
tools Auto generate new Serial numbers! 2025-07-23 09:56:02 -04:00
vm-configs Add ORION Hybrid Architecture - Combining best features from Proxmox and NixOS 2025-11-20 04:10:21 +00:00
.gitignore Add comprehensive Infrastructure as Code foundation with Terraform 2025-11-22 03:19:01 +00:00
.gitmodules Auto generate new Serial numbers! 2025-07-23 09:56:02 -04:00
AI_MAZE_ARCHITECTURE.md Add AI Maze security architecture with Backstage + Vapor 2025-11-22 01:08:24 +00:00
ARCHITECTURE_REVIEW.md Add AI Maze security architecture with Backstage + Vapor 2025-11-22 03:43:22 +00:00
CHANGELOG.md Upgrade to Opencore 0.7.9 2022-03-09 11:29:57 -03:00
DELL_R730_ORION_PROXMOX_INTEGRATION.md Add Proxmox with macOS integration for Dell R730 ORION deployment 2025-11-20 00:00:20 +00:00
INFRASTRUCTURE_AS_CODE_ARCHITECTURE.md Add comprehensive Infrastructure as Code foundation with Terraform 2025-11-22 03:19:01 +00:00
IPV6_ROUTING_INTEGRATION.md Integrate IPv6 BGP routing with AS394955 and prefix 2602:F674::/48 2025-11-22 02:39:02 +00:00
ORION_HYBRID_ARCHITECTURE.md Add ORION Hybrid Architecture - Combining best features from Proxmox and NixOS 2025-11-20 04:10:21 +00:00
ORION_QUICKSTART.md Add Proxmox with macOS integration for Dell R730 ORION deployment 2025-11-20 00:00:20 +00:00
QUICKSTART_HYBRID.md Add ORION Hybrid Architecture - Combining best features from Proxmox and NixOS 2025-11-20 04:10:21 +00:00
README.md Add ORION Hybrid Architecture - Combining best features from Proxmox and NixOS 2025-11-20 04:10:21 +00:00
deploy-ai-maze.sh Add AI Maze security architecture with Backstage + Vapor 2025-11-22 01:08:24 +00:00
deploy-ipv6-routing.sh Integrate IPv6 BGP routing with AS394955 and prefix 2602:F674::/48 2025-11-22 02:39:02 +00:00
deploy-orion-hybrid.py Add ORION Hybrid Architecture - Combining best features from Proxmox and NixOS 2025-11-20 04:10:21 +00:00
deploy-orion.sh Add Proxmox with macOS integration for Dell R730 ORION deployment 2025-11-20 00:00:20 +00:00
install.sh Auto generate new Serial numbers! 2025-07-23 09:56:02 -04:00
orion-config.json Add ORION Hybrid Architecture - Combining best features from Proxmox and NixOS 2025-11-20 04:10:21 +00:00
setup Auto generate new Serial numbers! 2025-07-23 09:56:02 -04:00

README.md

🚀 Dell R730 ORION - Hybrid Network Infrastructure

OSX-PROXMOX + NixOS Router + AI Agent + BGP Integration

GitHub stars GitHub forks GitHub license GitHub issues


🎯 ORION Hybrid Architecture

This repository combines the power of OSX-PROXMOX for macOS virtualization with a complete enterprise-grade network infrastructure for the Dell PowerEdge R730 (CQ5QBM2).

What's Included

  • Proxmox VE - Enterprise hypervisor with web management
  • NixOS + VyOS Router - High-performance routing with BGP (AS 394955)
  • AI Autonomous Agent - Intelligent network monitoring and self-healing
  • macOS Sequoia - Full macOS 15 support for development
  • iDRAC Automation - Complete remote management via Redfish API
  • Prometheus + Grafana - Real-time monitoring and dashboards
  • BGP Routing - Multi-peer BGP with Telus (AS 6939)

🚀 Quick Start (ORION Hybrid)

# Clone repository
git clone https://github.com/luci-digital/luci-macOSX-PROXMOX.git
cd luci-macOSX-PROXMOX

# Install dependencies
pip3 install requests

# Run automated deployment
python3 deploy-orion-hybrid.py

Documentation:

🏗️ Architecture Overview

Dell R730 ORION (384GB RAM, 56 threads)
├─ Proxmox VE 8.x (Hypervisor)
│  ├─ VM 200: NixOS + VyOS Router (8 cores, 32GB)
│  │  └─ BGP, Firewall, DHCP, DNS, NAT
│  ├─ VM 300: AI Agent (4 cores, 16GB)
│  │  └─ Autonomous monitoring, Prometheus, Grafana
│  └─ VM 100: macOS Sequoia (12 cores, 64GB)
│     └─ Development environment
└─ iDRAC Enterprise - Full remote management

📦 Repository Structure

luci-macOSX-PROXMOX/
├── deploy-orion-hybrid.py          # Main deployment automation
├── deploy-orion.sh                 # Legacy Proxmox deployment
├── orion-config.json               # Hardware & VM configuration
├── vm-configs/                     # NixOS VM configurations
│   ├── router-vm/                  # Router VM (NixOS + VyOS)
│   └── ai-agent-vm/                # AI monitoring agent
├── ORION_HYBRID_ARCHITECTURE.md    # Full architecture docs
├── QUICKSTART_HYBRID.md            # Quick start guide
└── tools/                          # Utility scripts

🌟 Key Features

Hybrid Design: Best of both worlds - virtualization flexibility with bare-metal routing performance

Full Automation: Deploy entire stack with one command via iDRAC Redfish API

Declarative Configuration: NixOS-based router and AI agent for reproducible deployments

AI-Powered Monitoring: Autonomous agent that monitors, alerts, and self-heals network issues

BGP Routing: Production-grade routing with BIRD2, supporting multi-peer BGP

macOS Development: Native macOS Sequoia environment via OSX-PROXMOX


🍎 Original OSX-PROXMOX Guide

v15 - Sequoia

The following guide provides the original OSX-PROXMOX installation method for running macOS on Proxmox VE with AMD or Intel hardware.


🛠 Installation Guide

  1. Install a FRESH/CLEAN version of Proxmox VE (v7.0.XX ~ 8.4.XX) - just follow the Next, Next & Finish (NNF) approach.
    • Preliminary support for Proxmox VE V9.0.0 BETA.
  2. Open the Proxmox Web Console → Navigate to Datacenter > YOUR_HOST_NAME > Shell.
  3. Copy, paste, and execute the command below:
/bin/bash -c "$(curl -fsSL https://install.osx-proxmox.com)"

🎉 Voilà! You can now install macOS! osx-terminal

🔧 Additional Configuration

Install EFI Package in macOS (Disable Gatekeeper First)

sudo spctl --master-disable

🍏 macOS Versions Supported

macOS High Sierra - 10.13
macOS Mojave - 10.14
macOS Catalina - 10.15
macOS Big Sur - 11
macOS Monterey - 12
macOS Ventura - 13
macOS Sonoma - 14
macOS Sequoia - 15


🖥 Proxmox VE Versions Supported

v7.0.XX ~ 8.4.XX

🔄 OpenCore Version

  • April/2025 - 1.0.4 → with SIP Enabled, DMG only signed by Apple and all features of securities

☁️ Cloud Support (Run Hackintosh in the Cloud!)

  • 🌍 VultR
  • 📺 Video Tutorial (Enable captions for better understanding)
  • Now has configurable bridges, and can add as many bridges and specify the subnet for them.

⚠️ Disclaimer

🚨 FOR DEVELOPMENT, STUDENT, AND TESTING PURPOSES ONLY.

I am not responsible for any issues, damage, or data loss. Always back up your system before making any changes.


📌 Requirements

Since macOS Monterey, your host must have a working TSC (timestamp counter). Otherwise, if you assign multiple cores to the VM, macOS may crash due to time inconsistencies. To check if your host is compatible, run the following command in Proxmox:

dmesg | grep -i -e tsc -e clocksource

Expected Output (for working hosts):

clocksource: Switched to clocksource tsc

Problematic Output (for broken hosts):

tsc: Marking TSC unstable due to check_tsc_sync_source failed
clocksource: Switched to clocksource hpet

🛠 Possible Fixes

  1. Disable "ErP mode" and all C-state power-saving modes in your BIOS. Then power off your machine completely and restart.
  2. Try forcing TSC in GRUB:
    • Edit /etc/default/grub and add:
      clocksource=tsc tsc=reliable
      
    • Run update-grub and reboot (This may cause instability).
  3. Verify the TSC clock source:
    cat /sys/devices/system/clocksource/clocksource0/current_clocksource
    
    The output must be tsc.

Read More


🔍 Troubleshooting

High Sierra & Below - Recovery Server Could Not Be Contacted

If you encounter this error, you need to switch from HTTPS to HTTP in the installation URL:

  1. When the error appears, leave the window open.

  2. Open Installer Log (Window > Installer Log).

  3. Search for "Failed to load catalog" → Copy the log entry.

  4. Close the error message and return to macOS Utilities.

  5. Open Terminal, paste the copied data, and remove everything except the URL (e.g., https://example.sucatalog).

  6. Change https:// to http://.

  7. Run the command:

    nvram IASUCatalogURL="http://your-http-url.sucatalog"
    
  8. Quit Terminal and restart the installation.

Reference & More Details

Problem for GPU Passthrough

If you see an Apple logo and the bar doesnt move on your external display, you need to disable “above 4g decoding” in the motherboards BIOS.

In some environments it is necessary to segment the IOMMU Groups to be able to pass the GPU to the VM.

  1. Add the content pcie_acs_override=downstream,multifunction pci=nommconf in the file /etc/default/grub at the end of the line GRUB_CMDLINE_LINUX_DEFAULT;
  2. After changing the grub file, run the command update-grub and reboot your PVE.

🎥 Demonstration (in Portuguese)

📽️ Watch on YouTube
(Enable auto-translate captions for English subtitles!)


🎖 Credits

  • OpenCore/Acidanthera Team - Open-source bootloader
  • Corpnewt - Tools (ProperTree, GenSMBIOS, etc.)
  • Apple - macOS
  • Proxmox - Fantastic virtualization platform & documentation

🌎 Join Our Community - Universo Hackintosh Discord

💬 Join Here!