34306/doublera1n

What it does

doublera1n boots a patched kernel and iBoot onto an iPhone's stock, sealed System volume while using a separate data volume as /private/var. The result is a rootless jailbroken environment (Sileo, Filza) on top of an untouched stock iOS install. A normal reboot returns to stock iOS; re-entering pwned DFU and running boot.sh boots the jailbreak state again.

The stated motivation is avoiding the storage cost of CFW dualboots and the recovery-mode lockups that CFW reboots can cause. SEP is disabled for the second data partition, so iCloud login does not work there; FairPlay is said to still function, so App Store apps run.

Quick start

You need a Mac with Homebrew, a usbliter8 board (RP2350) for pwned DFU, and a supported A13 device — iPhone 11 series / SE 2 listed, iPad 9 added but untested. The README currently marks support as iOS 27.0–27.2 on the main OS.

git clone https://github.com/34306/doublera1n.git
cd doublera1n
./boot.sh

On first run boot.sh invokes setup.sh, which installs libimobiledevice, libirecovery, ldid, libusb and ipsw, and creates a .venv from requirements.txt. Plug in the iPhone booted into iOS, let it read the version, then put the device into pwned DFU when prompted. The first boot.sh run installs the second data volume and asks for pwned DFU once more for the first boot; later runs just boot it. If the iPhone shows iPhone Partially Set Up, choose Continue with Partial Setup, not Erase and Start Over.

./dualboot.sh provides a menu for the same flow plus SSH access, re-applying userland fixes, and removing the second data volume.

Constraints and known limits

• Only iPhone 11 Pro on iOS 27.2 (24B119) is reported to have booted; other builds and devices are unverified. lib/precheck.py re-locates every patch site in the chosen IPSW and checks TSS before touching the device, but Apple changing a patched function can require a project update.
• The second data volume cannot sign into iCloud because SEP is disabled for it.
• Removing the second data volume is refused while a second iOS install exists, since both use the same Preboot folder.
• The dualboot "2nd iOS" feature is described as developing and not yet booted on a device; it needs roughly 22 GB free on the phone and 30 GB on the Mac.
• The firmware fetch relies on ipsw.me and AppleDB; builds on neither require supplying the IPSW manually. Builds Apple no longer signs use the newest signed ticket for the setup chain, and reading the installed ticket over UART requires the described B4 PICO DFU board.

HotRepo's take

The project entered HotRepo's new-project list for Python on 2026-11-09 with 101 stars and 13 forks, all gained inside roughly one day of its 2026-11-08 creation. There is no recorded all-language daily rank and only one star sample, so the data supports a fast early pickup but not a trend. That attention is plausible for a niche A13 jailbreak technique, yet the same data says nothing about how many readers actually got a device booting. The README's own single-device success claim and the untested iPad and dualboot paths are the practical bar to weigh before trying it.

Project source and documentation