Boot a virtual iPhone via Apple's Virtualization.framework using PCC research VM infrastructure.

One command creates a VM end-to-end (download → patch → DFU restore → CFW install → first boot):

### Prerequisites

Host:

- Apple Silicon

- macOS 15+ (Sequoia)

- Xcode + iOS SDK (cross-compiles the guest daemon)

- SIP/AMFI relaxation to allow private PV=3 entitlements with unsigned-binary

Dependencies:

- `brew install python@3.13 aria2 wget gnu-tar openssl@3 ldid-procursus sshpass keystone cmake libusb ipsw zstd`

### Install

- `brew install zqxwce/tap/vphone-cli`

### Quick Start

- `vphone-cli vm create myphone -V jb`

- `vphone-cli vm launch myphone`

### VM management

- `vphone-cli vm list`

- `vphone-cli vm info myphone`

- `vphone-cli vm new myphone`

- `vphone-cli vm config myphone --cpu 8 --memory 8192`

- `vphone-cli vm clone myphone myphone-2`

- `vphone-cli vm export myphone --out myphone.tzst`

- `vphone-cli vm import myphone.tzst --name restored`

- `vphone-cli vm rename myphone iphone16`

- `vphone-cli vm delete iphone16`

### Build a VM manually

- `vphone-cli vm new myphone`

- `vphone-cli fw prepare myphone --iphone-version 26.1`

- `vphone-cli fw patch myphone --variant jb`

- `vphone-cli vm launch myphone --dfu`

- `vphone-cli restore myphone --get-shsh`

- `vphone-cli restore myphone`

- `vphone-cli vm stop myphone`

- `vphone-cli cfw install myphone --variant jb`

- `vphone-cli vm launch myphone`

### Firmware Variants

Five patch variants with increasing security bypass — pass one to `--variant`: less, regular, dev, jb, exp.

### Running & Connecting

- SSH (jailbreak): `ssh -p 22222 mobile@<vm-ip>`