The iOS file system contains an operating system partition and a n data partition
Not to be confused with Apple File Service (AFS), the service implementing the Apple Filing Protocol (AFP). Show
Not to be confused with Andrew File System (AFS), the distributed file system. APFS
Apple File System (APFS) is a proprietary file system developed and deployed by Apple Inc. for macOS Sierra (10.12.4)[6] and later, iOS 10.3 and later, tvOS 10.2 and later,[7] watchOS 3.2 and later,[8] and all versions of iPadOS.[9][10] It aims to fix core problems of HFS+ (also called Mac OS Extended), APFS's predecessor on these operating systems. APFS is optimized for solid-state drive storage and supports encryption, snapshots, and increased data integrity, among other capabilities.[11][12] History[edit]Apple File System was announced at Apple's developers conference (WWDC) in June 2016 as a replacement for HFS+, which had been in use since 1998.[11][12] APFS was released for 64-bit iOS devices on March 27, 2017, with the release of iOS 10.3, and for macOS devices on September 25, 2017, with the release of macOS 10.13.[13][8] Apple released a partial specification for APFS in September 2018 which supported read-only access to Apple File Systems on unencrypted, non-Fusion storage devices. The specification for software encryption was documented later.[14] Design[edit]The file system can be used on devices with relatively small or large amounts of storage. It uses 64-bit inode numbers,[2] and allows for more secure storage.[how?] The APFS code, like the HFS+ code, uses the TRIM command for better space management and performance. It may increase read-write speeds on iOS and macOS,[8] as well as space on iOS devices, due to the way APFS calculates available data.[15] Partition scheme[edit]APFS uses the GPT partition scheme. Within the GPT scheme are one or more APFS containers (partition type GUID is 7C3457EF-0000-11AA-AA11-00306543ECAC). Within each container there are one or more APFS volumes, all of which share the allocated space of the container, and each volume may have APFS volume roles. macOS Catalina (macOS 10.15) introduced the APFS volume group, which are groups of volumes that Finder displays as one volume. APFS firmlinks lie between hard links and soft links and link between volumes. In macOS Catalina the System volume role (usually named "Macintosh HD") became read-only, and in macOS Big Sur (macOS 11) it became a signed system volume (SSV) and only volume snapshots are mounted. The Data volume role (usually named "Macintosh HD - Data") is used as an overlay or shadow of the System volume, and both the System and Data volumes are part of the same volume group and shown as one in Finder. Clones[edit]Clones allow the operating system to make efficient file copies on the same volume without occupying additional storage space. Changes to a cloned file are saved as delta extents, reducing storage space required for document revisions and copies.[10] There is, however, no interface to mark two copies of the same file as clones of the other, or for other types of data deduplication. Snapshots[edit]APFS volumes support snapshots for creating a point-in-time, read-only instance of the file system.[10] Encryption[edit]Apple File System natively supports full disk encryption,[2] and file encryption with the following options:
Increased maximum number of files[edit]APFS supports 64-bit inode numbers, supporting over 9 quintillion files (263) on a single volume.[2][5] Data integrity[edit]Apple File System uses checksums to ensure data integrity for metadata.[16] Crash protection[edit]Apple File System is designed to avoid metadata corruption caused by system crashes. Instead of overwriting existing metadata records in place, it writes entirely new records, points to the new ones and then releases the old ones, an approach known as redirect-on-write. This avoids corrupted records containing partial old and partial new data caused by a crash that occurs during an update. It also avoids having to write the change twice, as happens with an HFS+ journaled file system, where changes are written first to the journal and then to the catalog file.[16] Compression[edit]APFS supports transparent compression on individual files using Deflate (Zlib), LZVN (libFastCompression), and LZFSE. All three are Lempel-Ziv-type algorithms. This feature is inherited from HFS+, and is implemented with the same AppleFSCompression / decmpfs system using resource forks or extended attributes. As with HFS+, the transparency is broken for tools that do not use decmpfs-wrapped routines.[17] Space sharing[edit]APFS adds the ability to have multiple logical drives (referred to as volumes) in the same container where free space is available to all volumes in that container (block device).[18] Limitations[edit]While APFS includes numerous improvements relative to its predecessor, HFS+, a number of limitations have been noted. Limited integrity checks for user data[edit]APFS does not provide checksums for user data.[19] It also does not take advantage of byte-addressable non-volatile random-access memory.[20][21] Performance on hard disk drives[edit]Enumerating files, and any inode metadata in general, is much slower on APFS when it is located on a hard disk drive. This is because instead of storing metadata at a fixed location like HFS+ does, APFS stores them alongside the actual file data. This fragmentation of metadata means more seeks are performed when listing files, acceptable for SSDs but not HDDs.[22] Compatibility with Time Machine prior to macOS 11[edit]Unlike HFS+, APFS does not support hard links to directories.[3][23] Since the version of the Time Machine backup software included in Mac OS X 10.5 (Leopard) through macOS 10.15 (Catalina) relied on hard links to directories, APFS was initially not a supported option for its backup volumes.[24][23] This limitation was overcome starting in macOS 11 Big Sur, wherein APFS is now the default file system for new Time Machine backups (existing HFS+-formatted backup drives are also still supported).[25] macOS Big Sur's implementation of Time Machine in conjunction with APFS-formatted drives enables "faster, more compact, and more reliable backups" than were possible with HFS+-formatted backup drives.[26][27] Security issues[edit]
Support[edit]macOS[edit]Limited, experimental support for APFS was first introduced in macOS Sierra 10.12.4. Since
macOS 10.13 High Sierra, all devices with flash storage are automatically converted to APFS.[33] As of macOS 10.14 Mojave,
Fusion Drives and hard disk drives are also upgraded on installation.[34] The primary user interface to upgrade does not present an option to opt out of this conversion, and devices formatted with the High Sierra version of APFS will not be readable in previous versions of
macOS.[33] Users can disable APFS conversion by using the installer's FileVault volumes are not converted to APFS as of macOS Big Sur 11.2.1. Instead macOS formats external FileVault drives as CoreStorage Logical Volumes formatted with Mac OS Extended (Journaled). FileVault drives can be optionally encrypted.[citation needed] An experimental
version of APFS, with some limitations, is available in macOS Sierra through the command line iOS, tvOS, and watchOS[edit]iOS 10.3, tvOS 10.2, and watchOS 3.2 convert the existing HFSX file system to APFS on compatible devices.[13][8][39] Third-party utilities[edit]Despite the ubiquity of APFS volumes in today's Macs and the format's 2016 introduction, third-party repair utilities continue to have notable limitations in supporting APFS volumes, due to Apple's delayed release of complete documentation. According to Alsoft, the maker of DiskWarrior, Apple's 2018 release of partial APFS format documentation has delayed the creation of a version of DiskWarrior that can safely rebuild APFS disks.[40] Competing products, including MicroMat's TechTool and Prosoft's Drive Genius, are expected to increase APFS support as well. Paragon Software Group has published a software development kit under the 4-Clause BSD License that supports read-only access of APFS drives.[41] An independent read-only open source implementation by Joachim Metz, libfsapfs, is released under GNU Lesser General Public License v3. It has been packaged into Debian, Fedora Linux, Rocky Linux, Red Hat Enterprise Linux and Ubuntu software repositories.[42][43][44] Both are command-line tools that do not expose a normal filesystem driver interface. There is a Filesystem in Userspace (FUSE) driver for Linux called apfs-fuse with read-only access.[45] An "APFS for Linux" project is working to integrate APFS support into the Linux kernel.[46] See also[edit]
References[edit]
External links[edit]
Which file system is used in iOS?Apple File System (APFS) is a proprietary file system that was designed with encryption in mind. APFS works across all Apple's platforms — for iPhone, iPad, iPod touch, Mac, Apple TV and Apple Watch.
What partition holds user data on an iOS device?Data partition contains user data and can provide lots of artifacts during the investigation. It is a Read/Write partition. The structure of this partition has been changed with the different version of the IOS.
What is the file system used in the Apple operating system?Apple File System (APFS): The file system used by macOS 10.13 or later. Mac OS Extended: The file system used by macOS 10.12 or earlier. MS-DOS (FAT) and ExFAT: File systems that are compatible with Windows.
|