Can’t Remove Kernel Extensions Under Mojave

crashkernel-extensionsmojave

After updating to Mojave my system crashes. It can only be started in safe-mode.

According to crash logs from sysdiagnose, a particular extension is causing problems:

0xffffff811b0f3fa0 : 0xffffff800c9590ce
  Kernel Extensions in backtrace:
    com.coriolis-systems.driver.Snapshot(122.0)[5611248B-6440-3559-9F69-2F249150EA5A]@0xffffff7f8d734000->0xffffff7f8d7aafff
      dependency: com.apple.iokit.IOStorageFamily(2.1)[499E27C9-AC4D-3239-9FC4-754C7699FA76]@0xffffff7f8d704000

It seems the extension can be found but not removed

$:/Library/Extensions$ kextfind -b com.coriolis-systems.driver.Snapshot
/Library/Extensions/CoriolisSnapshot.kext
$:/Library/Extensions$ kextunload -b /Library/Extensions/CoriolisSnapshot.kext
(kernel) Kext /Library/Extensions/CoriolisSnapshot.kext not found for unload request.
Failed to unload /Library/Extensions/CoriolisSnapshot.kext - (libkern/kext) not found.

How do I remove this extension completely? It also shows up under /Library/StagedExtensions/Library/Extensions and /Library//SystemMigration/History/Migration-XXX/QuarantineRoot/Library/StagedExtensions/Library/Extensions/

For that matter are there any way to just remove all third-party extensions without a fresh install?

— UPDATE —

After losing patience I just removed the /Library/Extensions/CoriolisSnapshot.kext directory after having started in safe-mode. The system booted successfully into Mojave and then opened notification windows indicating several third party extensions were blocked. After allowing one to load the security and privacy pane opened where I was able to check/uncheck other extensions. The Coriolis Systems box was there and I left it unchecked. The system then restarted successfully without any more requests.

Fair warning! This was somewhat risky. Removing system folders can have unintended consequences. The only reason I was willing to try was that I made a full disk image backup just prior to installing Mojave.

Best Answer

As the developer responsible for that KEXT, I'm sorry that it's crashing. You did the right thing just deleting it; it isn't going to be updated for Mojave (because, frankly, there's no point; what with APFS and the various security changes, I'm afraid iDefrag is now a legacy-only product).

For anyone else seeing this problem, you can boot into Safe Mode by restarting your machine and holding Shift (the key marked ⇧) when you hear the boot chime. Alternatively, you can boot into Recovery Mode by holding Command (⌘) and R when you hear the chime; if you're in Recovery Mode, you can open Terminal from the "Utilities" menu at the top of the screen.

To delete the KEXT, follow the instructions below:

From Finder

  1. In Finder, choose "Go to Folder…" from the "Go" menu.

  2. Enter /Library/Extensions into the box that appears.

  3. Press "Go" (or hit Return).

  4. Drag the CoriolisSnapshot.kext to the Trash (or choose "Move to Trash" from the "File" menu).

From Terminal

  1. Enter sudo rm -rf /Library/Extensions/CoriolisSnapshot.kext at the prompt, and press Return.

  2. If prompted, enter your password and press Return.

Related Question