[GH-ISSUE #483] [BUG] App fails to launch in LiveContainer — “file system sandbox blocked mmap()” error #437

New issue

Closed

opened 2026-03-03 15:33:38 +03:00 by kerem · 2 comments

kerem commented

2026-03-03 15:33:38 +03:00

Owner

Originally created by @KatttTheFemboi on GitHub (May 2, 2025).
Original GitHub issue: https://github.com/LiveContainer/LiveContainer/issues/483

Describe the bug

For whatever reason LiveContainer (or maybe the iOS sandbox?) doesn't let me run apps installed on here, here's a log for me trying to run Beatclone which I've ran before in the past easily using the SideStore version of LiveContainer:

dlopen(/private/var/mobile/Containers/Data/Application/B901CCD5-E300-43B8-A8DA-644F399220A8/Documents/Applications/com.beatclone.beatstar.app/Beatstar, 0x0109): tried: '/private/var/mobile/Containers/Data/Application/B901CCD5-E300-43B8-A8DA-644F399220A8/Documents/Applications/com.beatclone.beatstar.app/Beatstar' (file system sandbox blocked mmap() of '/private/var/mobile/Containers/Data/Application/B901CCD5-E300-43B8-A8DA-644F399220A8/Documents/Applications/com.beatclone.beatstar.app/Beatstar'), '/private/preboot/Cryptexes/OS/private/var/mobile/Containers/Data/Application/B901CCD5-E300-43B8-A8DA-644F399220A8/Documents/Applications/com.beatclone.beatstar.app/Beatstar' (no such file), '/private/var/mobile/Containers/Data/Application/B901CCD5-E300-43B8-A8DA-644F399220A8/Documents/Applications/com.beatclone.beatstar.app/Beatstar' (file system sandbox blocked mmap() of '/private/var/mobile/Containers/Data/Application/B901CCD5-E300-43B8-A8DA-644F399220A8/Documents/Applications/com.beatclone.beatstar.app/Beatstar')

As you can see it complains about sandbox related things

Device: iPhone 15 Pro
Version: iOS 18.0
App: Beatclone (Worked before)
Launch Mode: JIT-Less (launching with JIT worked at least on MelonX, but the JIT-Less test passes so that shouldn't be the issue?)
Apps also tested: Discord IPA
Certificate: KravaSign

Instructions to reproduce

Get a KravaSign certificate
Sideload LiveContainer
Fully set it up and test JIT-Less mode to make sure it passes
Import and run an app
It should fail because of mmap

What version of LiveContainer are you using?

3.3.0-release

Other info

No response

Originally created by @KatttTheFemboi on GitHub (May 2, 2025). Original GitHub issue: https://github.com/LiveContainer/LiveContainer/issues/483 ### Describe the bug For whatever reason LiveContainer (or maybe the iOS sandbox?) doesn't let me run apps installed on here, here's a log for me trying to run Beatclone which I've ran before in the past easily using the SideStore version of LiveContainer: dlopen(/private/var/mobile/Containers/Data/Application/B901CCD5-E300-43B8-A8DA-644F399220A8/Documents/Applications/com.beatclone.beatstar.app/Beatstar, 0x0109): tried: '/private/var/mobile/Containers/Data/Application/B901CCD5-E300-43B8-A8DA-644F399220A8/Documents/Applications/com.beatclone.beatstar.app/Beatstar' (file system sandbox blocked mmap() of '/private/var/mobile/Containers/Data/Application/B901CCD5-E300-43B8-A8DA-644F399220A8/Documents/Applications/com.beatclone.beatstar.app/Beatstar'), '/private/preboot/Cryptexes/OS/private/var/mobile/Containers/Data/Application/B901CCD5-E300-43B8-A8DA-644F399220A8/Documents/Applications/com.beatclone.beatstar.app/Beatstar' (no such file), '/private/var/mobile/Containers/Data/Application/B901CCD5-E300-43B8-A8DA-644F399220A8/Documents/Applications/com.beatclone.beatstar.app/Beatstar' (file system sandbox blocked mmap() of '/private/var/mobile/Containers/Data/Application/B901CCD5-E300-43B8-A8DA-644F399220A8/Documents/Applications/com.beatclone.beatstar.app/Beatstar') As you can see it complains about sandbox related things Device: iPhone 15 Pro Version: iOS 18.0 App: Beatclone (Worked before) Launch Mode: JIT-Less (launching with JIT worked at least on MelonX, but the JIT-Less test passes so that shouldn't be the issue?) Apps also tested: Discord IPA Certificate: KravaSign ### Instructions to reproduce 1. Get a KravaSign certificate 2. Sideload LiveContainer 3. Fully set it up and test JIT-Less mode to make sure it passes 4. Import and run an app 5. It should fail because of mmap ### What version of LiveContainer are you using? 3.3.0-release ### Other info _No response_

kerem

2026-03-03 15:33:38 +03:00

closed this issue
added the
bug
label

kerem commented

2026-03-03 15:33:39 +03:00

Author

Owner

@hugeBlack commented on GitHub (May 3, 2025):

Get a KravaSign certificate

Livecontainer only works if your cert has get-taks-allow

See https://developer.apple.com/forums/thread/126537

@hugeBlack commented on GitHub (May 3, 2025): >Get a KravaSign certificate Livecontainer only works if your cert has get-taks-allow See https://developer.apple.com/forums/thread/126537

kerem commented

2026-03-03 15:33:39 +03:00

Author

Owner

@dennis777 commented on GitHub (May 3, 2025):

Get a KravaSign certificate

Livecontainer only works if your cert has get-taks-allow

See https://developer.apple.com/forums/thread/126537

Sorry I don't mean to bother, is there a way to get that entitlement on my dev certificate? Or is there a way to sign the IPA with my developer account with that entitlement? I tried building and installing from source in Xcode but I get a bunch of signing errors. I'm not familiar with the signing process outside of the usual Xcode build and run which has never led me to any issues

@dennis777 commented on GitHub (May 3, 2025): > > Get a KravaSign certificate > > Livecontainer only works if your cert has get-taks-allow > > See https://developer.apple.com/forums/thread/126537 Sorry I don't mean to bother, is there a way to get that entitlement on my dev certificate? Or is there a way to sign the IPA with my developer account with that entitlement? I tried building and installing from source in Xcode but I get a bunch of signing errors. I'm not familiar with the signing process outside of the usual Xcode build and run which has never led me to any issues