{"id":7906,"date":"2026-08-11T16:52:11","date_gmt":"2026-08-11T07:52:11","guid":{"rendered":"https:\/\/appbay.org\/?p=7906"},"modified":"2026-08-13T20:37:29","modified_gmt":"2026-08-13T11:37:29","slug":"mac-utm-openbsd%e3%82%a4%e3%83%b3%e3%82%b9%e3%83%88%e3%83%bc%e3%83%ab","status":"publish","type":"post","link":"https:\/\/appbay.org\/?p=7906","title":{"rendered":"Macbook UTM + OpenBSD\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb(\u30eb\u30fc\u30bf)"},"content":{"rendered":"

OpenBSD\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9<\/h2>\n

cd ~\/Downloads
\ncurl -O https:\/\/cdn.openbsd.org\/pub\/OpenBSD\/7.9\/arm64\/install79.iso
\ncurl -O https:\/\/cdn.openbsd.org\/pub\/OpenBSD\/7.9\/arm64\/SHA256
\nshasum -a 256 install79.iso
\ngrep install79.iso SHA256 # \u4e00\u81f4\u3092\u76ee\u8996\u78ba\u8a8d<\/p>\n

UTM\u30c0\u30a6\u30ed\u30fc\u30c9<\/h2>\n

https:\/\/mac.getutm.app\/
\n\u304b\u3089\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9<\/p>\n

\u4eee\u60f3\u30de\u30b7\u30f3\u4f5c\u6210<\/h2>\n

\u65b0\u898f\u4eee\u60f3\u30de\u30b7\u30f3\u3092\u4f5c\u6210
\n\u4eee\u60f3\u5316
\n\u305d\u306e\u4ed6
\n\u30e1\u30e2\u30ea:2048
\n\u30b3\u30a2:2
\nCD\/DVD:install79.iso
\nUEFI:\u30c1\u30a7\u30c3\u30af
\n\u30b9\u30c8\u30ec\u30fc\u30b8:20GiB
\n\u5171\u6709\u30c7\u30a3\u30ec\u30af\u30c8\u30ea:\u30b9\u30ad\u30c3\u30d7
\n\u540d\u524d:OpenBSD 7.9<\/p>\n

OpenBSD\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7<\/h2>\n

(I)nstall
\nTerminal Type: vt220
\nSystem hostname: bsd
\nNetwork interface to configure: vio0
\nIPv4 address for vio0 (or ‘autocnf’ or ‘none’): autoconf
\nIPv6 address for vio0 (or ‘autoconf’ or ‘none’): none
\nNetwork interface to configure (name, lladdr, ‘?’, or ‘done’): done
\nPassword for root account: 1234
\nStart sshd(8) by default: yes
\nSetup a user: testuser
\nFull name for user testuser: testuser
\nPassword for user testuser: 1234
\nAllow root ssh login: no
\nWhat timezone are you in: Asia\/Tokyo
\nWhich disk is the root disk: sd0
\nEncrypt the root disk with a (p)assphrase or (k)eydisk: no
\nUse (W)hole disk or (E)dit the MBR: whole
\nUse (A)uto layout, (E)dit auto layout, or create (C)ustome layout: auto
\nLocation of sets (cd0 disk http nfs or ‘done’): cd0
\nPathname to the sets: 7.9\/arm64
\nSet name(s) (or ‘abort’ or ‘done’): -x* -game79.tgz
\n\u203bxbase79 xfont79 xserv79 xshare79 \u306e [X] \u304c\u5916\u308c\u305f\u306e\u3092\u78ba\u8a8d
\nSet name(s) (or ‘abort’ or ‘done’): done
\nDirectory does not contain SHA256.sig Continue without verification: yes
\n\u203b\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb
\nLocation of sets (cd0 disk http nfs or ‘done’): done
\nExit to (S)hell, (H)alt or (R)eboot: reboot
\n\u203breboot\u306e\u524d\u306bUTM\u5074\u3067ISO\u3092\u53d6\u308a\u51fa\u3059<\/p>\n

\u8d77\u52d5\u5f8c<\/h2>\n

\u30fb\u30bf\u30fc\u30df\u30ca\u30ebSSH\u30ed\u30b0\u30a4\u30f3<\/p>\n

ip\u30a2\u30c9\u30ec\u30b9\u3092\u78ba\u8a8d
\nifconfig vio0<\/p>\n

SSH\u3067\u63a5\u7d9a
\nssh testuser@192.168.64.2<\/p>\n

\u30fbdoas<\/p>\n

su –
\necho “permit persist keepenv :wheel” > \/etc\/doas.conf
\nexit<\/p>\n

\u30fbsyspatch<\/p>\n

doas syspatch
\n\u203b\u81ea\u52d5\u3067\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3055\u308c\u308b
\ndoas reboot<\/p>\n

\u30fbsyspatch\u30b3\u30de\u30f3\u30c9<\/p>\n

\u5229\u7528\u53ef\u80fd\u306a\u30d1\u30c3\u30c1\u3092\u5168\u90e8\u53d6\u5f97\u30fb\u9069\u7528
\ndoas syspatch<\/p>\n

\u9069\u7528\u6e08\u307f\u30d1\u30c3\u30c1
\nsyspatch -l<\/p>\n

\u4f55\u304c\u6765\u3066\u3044\u308b\u304b\u78ba\u8a8d\u3060\u3051(\u9069\u7528\u3057\u306a\u3044)
\ndoas syspatch -c<\/p>\n

\u9069\u7528\u6e08\u307f\u30d1\u30c3\u30c1\u306e\u4e00\u89a7
\nsyspatch -l<\/p>\n

\u76f4\u8fd1\u306e\u30d1\u30c3\u30c1\u3092\u53d6\u308a\u6d88\u3059
\ndoas syspatch -r<\/p>\n

\u4e0d\u8981\u30b5\u30fc\u30d3\u30b9\u505c\u6b62<\/h2>\n

\u30fb\u8d77\u52d5\u4e2d\u306e\u30b5\u30fc\u30d3\u30b9
\ndoas rcctl ls started<\/p>\n

cron
\n<\/span>dhcpleased
\n<\/span>ntpd
\n<\/span>pflogd
\n<\/span>resolvd
\n<\/span>slaacd
\n<\/span>smtpd
\n<\/span>sndiod
\n<\/span>sshd
\n<\/span>syslogd<\/span><\/p>\n

\u30fb\u505c\u6b62\u3059\u308b\u30b5\u30fc\u30d3\u30b9<\/p>\n

\u30aa\u30fc\u30c7\u30a3\u30aa
\ndoas rcctl stop sndiod && doas rcctl disable sndiod<\/p>\n

SLAAC\u30af\u30e9\u30a4\u30a2\u30f3\u30c8(IPv6)
\ndoas rcctl stop slaacd && doas rcctl disable slaacd<\/p>\n

DHCP\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u505c\u6b62<\/h3>\n

doas rcctl stop dhcpleased && doas rcctl disable dhcpleased<\/p>\n

cat \/etc\/hostname.*
\n\u304c
\ninet autoconf
\n\u306e\u5834\u5408\u3001dhcpleased\u3092\u3068\u3081\u3066\u306f\u99c4\u76ee\u3002
\n\u3082\u3057\u5148\u306b\u6b62\u3081\u305f\u5834\u5408\u3001
\ndoas rcctl enable dhcpleased && doas rcctl start dhcpleased
\n\u306b\u3066\u6709\u52b9\u5316\u3067\u304d\u308b\u3002<\/span><\/p>\n

resolvd\u505c\u6b62<\/h3>\n

\/etc\/resolv.conf\u3092\u66f8\u304d\u63db\u3048\u308b\u4fc2
\n\u203bdhcpleased\u304c\u6709\u52b9\u306a\u3089\u3053\u3061\u3089\u3082\u6709\u52b9\u306b\u3059\u308b\u3002
\ndoas rcctl stop resolvd && doas rcctl disable resolvd
\ndoas rcctl enable<\/span> resolvd && doas rcctl start<\/span> resolvd<\/p>\n

cat \/etc\/resolv.conf
\n<\/span>nameserver 192.168.64.1 # resolvd: vio0<\/span><\/p>\n

\u30b5\u30fc\u30d3\u30b9\u8abf\u3079\u65b9<\/h2>\n

\u30fb\u8d77\u52d5\u6642\u306b\u4e0a\u304c\u308b\u30b5\u30fc\u30d3\u30b9(started\u306f\u3059\u3067\u306b\u8d77\u52d5\u3057\u3066\u3044\u308b\u30b5\u30fc\u30d3\u30b9)
\nrcctl ls on<\/p>\n

\u30fb\u8d77\u52d5\u306b\u5931\u6557\u3057\u3066\u3044\u308b\u30b5\u30fc\u30d3\u30b9
\nrcctl ls failed<\/p>\n

\u30fb\u72b6\u614b\u78ba\u8a8d
\nrcctl check <name><\/p>\n

\u30fb\u8d77\u52d5\u5931\u6557\u306e\u7406\u7531
\ntail \/var\/log\/daemon<\/p>\n

\u30fb\u5168\u90e8(rc.d \u306b\u3042\u308b\u30b9\u30af\u30ea\u30d7\u30c8\u5168\u3066)
\nrcctl ls all<\/p>\n

\u30fb\u7121\u52b9\u306b\u306a\u3063\u3066\u3044\u308b\u3082\u306e
\nrcctl ls off<\/p>\n

\u30fb\u4eca\u52d5\u3044\u3066\u3044\u306a\u3044\u3082\u306e
\nrcctl ls stopped<\/p>\n

\u30fb\u30d7\u30ed\u30bb\u30b9\u4e00\u89a7(rcctl\u306f\u30b5\u30fc\u30d3\u30b9\u5358\u4f4d)
\nps auxw<\/p>\n

\u30fb\u5f85\u3061\u53d7\u3051\u3066\u3044\u308b\u30dd\u30fc\u30c8
\nnetstat -an -f inet<\/p>\n

\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u8a2d\u5b9a<\/h2>\n\n\n\n\n\n\n\n
UTM<\/th>\nParallels<\/th>\nVMware<\/th>\nVirtualBox<\/th>\n<\/tr>\n<\/thead>\n
Shared<\/td>\n\u5171\u6709\u30cd\u30c3\u30c8\u30ef\u30fc\u30af<\/td>\nNAT<\/td>\nNAT<\/td>\n<\/tr>\n
Host Only<\/td>\n\u30db\u30b9\u30c8\u30aa\u30f3\u30ea\u30fc<\/td>\nHost-only<\/td>\n\u30db\u30b9\u30c8\u30aa\u30f3\u30ea\u30fc<\/td>\n<\/tr>\n
Bridged<\/td>\n\u30d6\u30ea\u30c3\u30b8<\/td>\n\u30d6\u30ea\u30c3\u30b8<\/td>\n\u30d6\u30ea\u30c3\u30b8<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Parallels\u306e\u5171\u6709\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306f10.211.55.0\/24
\n\u30db\u30b9\u30c8\u30aa\u30f3\u30ea\u30fc\u306f10.37.129.0\/24<\/p>\n

HostOnly\u306f\u30db\u30b9\u30c8OS\u3068\u30b2\u30b9\u30c8OS\u3092L2\u30b9\u30a4\u30c3\u30c1\u3067\u7e4b\u3044\u3060\u30a4\u30e1\u30fc\u30b8\u3002\u30db\u30b9\u30c8OS\u304cDHCP\u3068\u3057\u3066\u632f\u308b\u821e\u3046\u304cNAT\u30fb\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u6a5f\u80fd\u306f\u306a\u3044\u3002\u8907\u6570\u306e\u30b2\u30b9\u30c8OS\u3092\u7acb\u3061\u4e0a\u3052\u305f\u5834\u5408\u305d\u306eL2\u30b9\u30a4\u30c3\u30c1\u306b\u8907\u6570\u3064\u306a\u304c\u3063\u3066\u3044\u308b\u30a4\u30e1\u30fc\u30b8\u3002<\/p>\n

Shared\u306fHostOnly\u3068\u540c\u3058\u914d\u7dda\u3067\u30db\u30b9\u30c8OS\u304cNAT\u30fb\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u307e\u3067\u3059\u308b\u30eb\u30fc\u30bf\u3068\u3057\u3066\u632f\u308b\u821e\u3046\u30a4\u30e1\u30fc\u30b8\u3002<\/p>\n

Bridged\u306f\u8ad6\u7406\u7684\u306b\u72ec\u7acb\u3057\u305fNIC\u306b\u306a\u308a\u3001MAC\u30a2\u30c9\u30ec\u30b9\u3082\u5225\u306b\u306a\u308b\u3002(Bridged\u3067\u306fWiFi\u306f\u6a5f\u80fd\u3057\u306a\u3044\u3002WiFi\u306f1\u3064\u306e\u30a2\u30bd\u30b7\u30a8\u30fc\u30b7\u30e7\u30f3\u30671\u3064\u306eMAC\u30a2\u30c9\u30ec\u30b9\u306e\u305f\u3081)Mac\u304c\u30db\u30b9\u30c8OS\u306e\u5834\u5408\u3001Shared\u3001HostOnly\u3067\u3082bridgexxx\u3068\u3044\u3046\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u304c\u4f5c\u6210\u3055\u308c\u308b\u304c\u3001Bridged\u3067\u52d5\u4f5c\u3057\u3066\u3044\u308b\u308f\u3051\u3067\u306f\u306a\u3044\u306e\u3067\u6ce8\u610f\u3002<\/p>\n

\u30eb\u30fc\u30bf\u30fc\u8a2d\u5b9a<\/h2>\n

\u30fbUTM\u3067NIC\u8ffd\u52a0<\/p>\n

\u8d77\u52d5\u3057\u3066\u3044\u305f\u3089VM\u3092\u30b7\u30e3\u30c3\u30c8\u30c0\u30a6\u30f3\u3059\u308b\u3002<\/p>\n

\u65e2\u5b58VM>\u53f3\u30af\u30ea\u30c3\u30af>\u7de8\u96c6
\n\u30b5\u30a4\u30c9\u30e1\u30cb\u30e5\u30fc>\u30c7\u30d0\u30a4\u30b9>\u65b0\u898f>\u30cd\u30c3\u30c8\u30ef\u30fc\u30af
\n\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30e2\u30fc\u30c9:\u30db\u30b9\u30c8\u306e\u307f>\u4fdd\u5b58<\/p>\n

ifconfig
\nvio1\u304c\u8868\u793a\u3055\u308c\u3066\u3044\u308c\u3070OK<\/p>\n

\u30fbDHCP\u3067vio1\u3092\u6709\u52b9\u5316<\/p>\n

doas ifconfig vio1 up
\ndoas dhcpleasectl vio1
\nifconfig vio1
\n>192.168.128.2<\/span><\/p>\n

\u30fbvio1\u9759\u7684\u30a2\u30c9\u30ec\u30b9\u30d5\u30a1\u30a4\u30eb\u3092\u4f5c\u6210<\/p>\n

doas vi \/etc\/hostname.vio1
\ninet 192.168.128.254<\/span> 255.255.255.0<\/p>\n

doas chmod 640 \/etc\/hostname.vio1
\ndoas chown root:wheel \/etc\/hostname.vio1<\/p>\n

\u30fbvio1\u518d\u8d77\u52d5<\/p>\n

doas sh \/etc\/netstart vio1
\nifconfig vio1<\/p>\n

\u30fbvio1\u306eDHCP\u3092\u5916\u3059<\/p>\n

doas ifconfig vio1 -autoconf
\n(doas ifconfig vio1 delete)
\ndoas sh \/etc\/netstart vio1
\nifconfig vio1<\/p>\n

\u203bifconfig\u306bAUTOCONF4\u304c\u3042\u308b\u3068DHCP<\/p>\n

\u30fb\u8ee2\u9001\u3092\u6709\u52b9\u5316<\/p>\n

doas sysctl net.inet.ip.forwarding=1<\/p>\n

\u30fb\u6052\u4e45\u5316<\/p>\n

doas vi \/etc\/sysctl.conf
\nnet.inet.ip.forwarding=1
\n\u3092\u8ffd\u52a0\u3059\u308b\u3002<\/p>\n

\u30fb\u78ba\u8a8d<\/p>\n

sysctl net.inet.ip.forwarding<\/p>\n

\u7d4c\u8def
\nnetstat -rn -f inet<\/p>\n

\u30fbpf.conf<\/p>\n

doas cp \/etc\/pf.conf \/etc\/pf.conf.ok
\ndoas vi \/etc\/pf.conf<\/p>\n

ext_if = \"vio0\"\r\nint_if = \"vio1\"\r\n\r\nset skip on lo\r\n\r\nmatch out on $ext_if inet from ($int_if:network) to any nat-to ($ext_if:0)\r\n\r\nblock return\t# block stateless traffic\r\npass\t\t# establish keep-state\r\n\r\n# By default, do not permit remote connections to X11\r\nblock return in on ! lo0 proto tcp to port 6000:6010\r\n\r\n# Port build user does not need network\r\nblock return out log proto {tcp udp} user _pbuild<\/pre>\n
\u30fb\u691c\u8a3c
\ndoas pfctl -nf \/etc\/pf.conf<\/p>\n
\u30fb\u9069\u7528
\ndoas pfctl -f \/etc\/pf.conf<\/p>\n
\u30fb\u52d5\u3044\u3066\u3044\u308b\u30eb\u30fc\u30eb\u3092\u8868\u793a
\ndoas pfctl -sr<\/p>\n
\u30eb\u30fc\u30bf\u52d5\u4f5c<\/h2>\n
\u8ee2\u9001\u306e\u6574\u7406<\/h3>\n
\u30dd\u30fc\u30c8\u306b\u5c4a\u3044\u305f\u30d1\u30b1\u30c3\u30c8\u306f\u3001
\n\u30fb\u5b9b\u5148\u306eL3(IP)
\n\u30fb\u5b9b\u5148\u306eL2(MAC)
\n\u30fb\u9001\u4fe1\u5143\u306eL3(IP)
\n\u30fb\u9001\u4fe1\u5143\u306eL2(MAC)
\n\u3092\u6301\u3063\u3066\u304a\u308a\u3001\u30dd\u30fc\u30c8\u304c\u53d7\u3051\u53d6\u308b\u306e\u306f\u3001\u5b9b\u5148MAC\u304c\u81ea\u5206\u3001\u30d6\u30ed\u30fc\u30c9\u30ad\u30e3\u30b9\u30c8\u3001\u52a0\u5165\u30de\u30eb\u30c1\u30ad\u30e3\u30b9\u30c8\u306e\u3044\u305a\u308c\u304b\u3002
\n\u5b9b\u5148IP\u304c\u81ea\u5206\u3067\u306a\u304f\u3001\u304b\u3064\u8ee2\u9001\u6a5f\u80fd\u304c\u6709\u52b9\u306a\u3089\u3001\u7d4c\u8def\u8868\u3067\u30de\u30c3\u30c1\u3057\u305f\u884c\u306e\u51fa\u53e3\u30dd\u30fc\u30c8\u304b\u3089\u51fa\u3057\u3001\u5b9b\u5148MAC\u306f\u305d\u306e\u884c\u306eGateway\u304b\u3089\u6c7a\u307e\u308b\u3002
\n\u9001\u4fe1\u5143\u3001\u5b9b\u5148MAC\u306f\u30db\u30c3\u30d7\u3054\u3068\u306b\u66f8\u304d\u63db\u308f\u308b\u3002
\nIP\u306fNAT\u3092\u901a\u308b\u3068\u304d\u306b\u66f8\u304d\u63db\u308f\u308a\u3001(\u9001\u4fe1\u5143NAT\u306a\u3089\u9001\u4fe1\u5143\u3001\u5b9b\u5148NAT\u306a\u3089\u5b9b\u5148)\u3001NAT\u304c\u7121\u3051\u308c\u3070\u6700\u5f8c\u307e\u3067\u5909\u308f\u3089\u306a\u3044\u3002
\n\u81ea\u5206\u4ee5\u5916\u306e\u5b9b\u5148\u306b\u8ee2\u9001\u3059\u308b\u5ea6\u306bTTL\u3092\u4e00\u6e1b\u3089\u3059\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
OpenBSD\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9 cd ~\/Downloads curl -O https:\/\/cdn.openbsd.org\/pub\/OpenBSD\/7.9\/arm64\/install79.iso curl -O https … <\/p>\n
“Macbook UTM + OpenBSD\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb(\u30eb\u30fc\u30bf)” \u306e<\/span>\u7d9a\u304d\u3092\u8aad\u3080<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-7906","post","type-post","status-publish","format-standard","hentry","category-1"],"_links":{"self":[{"href":"https:\/\/appbay.org\/index.php?rest_route=\/wp\/v2\/posts\/7906","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/appbay.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/appbay.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/appbay.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/appbay.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7906"}],"version-history":[{"count":13,"href":"https:\/\/appbay.org\/index.php?rest_route=\/wp\/v2\/posts\/7906\/revisions"}],"predecessor-version":[{"id":7919,"href":"https:\/\/appbay.org\/index.php?rest_route=\/wp\/v2\/posts\/7906\/revisions\/7919"}],"wp:attachment":[{"href":"https:\/\/appbay.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7906"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/appbay.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7906"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/appbay.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7906"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}