It's over, even iOS has fallen
iOS has finally fallen, and the Apple clone phones from Huaqiangbei are about to explode. Let me give you the conclusion first: iOS has been knocked off its pedestal. It's not an emulator, not a reskinned theme—it's Apple's XNU kernel plus the original userland, running natively on a Qualcomm Snapdragon chip. Android phones can finally flash iOS. A repository called UniXNU appeared on GitHub. Ten days later, 1,194 stars, 203
💡 What You Will Learn
iOS has finally fallen, and the Apple clone phones from Huaqiangbei are about to explode. Let me give you the conclusion first: iOS has been knocked off its pedestal. It's not an emulator, not a reski
📜 Table of Contents
iOS Has Finally Fallen — the Knockoff Apple Phones of Huaqiangbei Are About to Explode
Let's start with the conclusion: iOS has been knocked off its pedestal.
Not an emulator, not a reskinned theme — it's Apple's XNU kernel plus the original userland, running natively on a Qualcomm Snapdragon chip.
Android phones can finally flash iOS. A repository called UniXNU appeared on GitHub. Ten days later: 1,194 stars, 203 forks. As of today, the device list already includes over a hundred machines: Xiaomi, Redmi, OnePlus, OPPO, Nothing, Samsung, Motorola, LG, Sony, Lenovo, Meizu, ZTE — even Microsoft's abandoned Surface Duo and the old Lumia 950 have people tinkering with them.
What this project is doing
UniXNU's positioning is clear: make iOS and macOS run on non-Apple ARM64 hardware.
It likens itself to OpenCore in the PC Hackintosh world — not hardcoded for any single machine, but providing a generic UEFI environment, driver loading framework, build tools, and reusable components. SoC repos handle platform commonalities; device repos only handle board-level configuration and hardware integration. The workload for a new model goes from "rewrite everything" to "fill in the form + patch drivers."
The entry point is extremely clever. The kernel field in an Android boot image is already a gzip stream, and the stock bootloader only verifies the header it recognizes — it doesn't look at what's stuffed after it. UniXNU puts the bootloader at the very front, the UEFI firmware right behind it, and once the bootloader jumps, control changes hands. After that comes a six-stage relay, with launchd pulling up the final link, and the desktop lights up.
Not a single line of Apple's signing was changed
This is the most counterintuitive part. Many people assume projects like this have to tear out the signature checks first, but dig into the docs and you find AMFI and AppleImage4 are left completely intact.
UniXNU does something else: it signs the trust cache itself, specifies the chip ID itself, writes the identity into the device tree itself, then hands it back to Apple's own code and lets it verify.
The verification is real; the thing being verified is fake.
The hardest hurdle is memory pages: Apple's kernel uses 16KiB pages, Snapdragon platforms use 4KiB. Page size is hardcoded in the config — get it wrong and you can't even map memory, and the granularity of the signature hashes has to be recalculated too.
How far it's gotten
The official primary reference device is the Xiaomi Pad 6S Pro, Snapdragon 8 Gen 2. In the porting log, all 13 domains are implemented: build, firmware, CPU, memory, storage, display, touch, GPU, network, audio, power, diagnostics, packaging. Target system: iPadOS 17.7.11.
The Metal driver for the Adreno 740 works, and the UI is hardware-composited by the GPU — that's the watershed. Once the GPU works, the desktop actually glides.
On the phone side, the Redmi K90 Pro Max boots iOS 17, with GPU rendering, multi-core scheduling, 120Hz high refresh, and USB channels all working.
The most impressive case is on Microsoft's abandoned child: the Surface Duo 2, Snapdragon 888, running iOS 26, with Liquid Glass's glassy texture — and on dual screens. The developer decompiled the IPSW himself and wrote a Metal-to-Vulkan translation layer so the Adreno 660 can understand Apple's graphics instructions.
From Snapdragon 835 all the way to Snapdragon 8 Elite Gen 5, from iOS 16 to iOS 26, with MediaTek, Unisoc, and Samsung Exynos in between. That span is wider than any phone manufacturer's product line.
AI is the real accelerator
That Surface Duo 2 port took the developer two months.
What does two months mean? In the past, one model took several months, all brute-forced by hand — parsing device trees, matching registers, writing drivers.
More importantly, here's the other thing he said: part of the work was ChatGPT explaining the parts of the XNU kernel he didn't originally understand.
The barrier to reading an unfamiliar kernel dropped from three years to two months. That's the real starting point of the butterfly effect — not that someone is uniquely gifted, but that the price of foundational knowledge has been driven down.
The breath Huaqiangbei has been holding
What does Huaqiangbei sell now? At Yuanwang Digital City, domestic foldables wrapped in an iOS-like interface, 1,200 to 2,800 yuan. The biggest embarrassment: factory reset, and the Android underneath is exposed.
UniXNU is exactly what turns "looks like" into "is." This is the thing the knockoff phone industry has wanted most for a decade and could never get.
Of course, it's nowhere near sellable yet. Camera, speaker, power button, cellular — none of it works yet. A phone that can't make calls isn't a product, and Apple's activation servers and App Store authorization are still standing in the way.
But the nature of the barrier has changed: it used to be "impossible," now it's "not finished yet."
Between those two phrases lies the imagination of an entire industry chain.
From a tech enthusiast's perspective, it's foreseeable that in the near future, Android phones will be able to flash iOS just like PCs hackintosh — and my fellow enthusiasts will have a new toy to tinker with.
Written by our editorial team; tools listed here are tested or verified against public sources. Links point to official sites or GitHub repos for reference only — no paid placements.