For years, the Apple Simulator has been the gold standard for iOS development, but it’s not a true virtual machine—it’s a simulation. For security researchers and power users, the holy grail has always been a fully virtualized iOS environment. While Apple’s Virtualization.framework officially only supports macOS and Linux guests, a new frontier has opened up, and it’s all thanks to Apple's own cloud infrastructure.
The PCC Loophole
The breakthrough comes from Apple's Private Cloud Compute (PCC) and cloudOS images. It turns out Apple provides an iOS kernel for the Virtualization.framework within these research VM infrastructures. By pairing this kernel with the iOS user-space and applying specific patches, developers have found a way to bypass the official limitations. Projects like vphone-cli are now enabling this feat on Apple Silicon Macs running macOS 15 (Sequoia).
From PoC to Research Tool
This isn't a one-click app store download; it's a high-signal technical achievement. To get it running, you need an Apple Silicon host, Xcode, and the iOS SDK to cross-compile the guest daemon. The result? A bootable, virtualized iPhone (some reports mention iOS 26/experimental versions) that runs as a guest VM. For security researchers, this is a game-changer, providing a sandbox for deep system analysis without needing a physical device or a traditional jailbreak.
What This Means for the Future
While this remains a proof-of-concept (PoC) for now, it highlights a fascinating intersection between Apple's cloud strategy and local virtualization. Whether this leads to a first-party "iOS VM" for developers or remains a niche tool for the research community, the boundary between macOS and iOS has never felt thinner.
Sources
Media
