dpp

All-in-one Rust pipeline for Apple DMG → HFS+ → PKG → PBZX extraction

Open a .dmg, browse the HFS+ filesystem inside, extract .pkg installers, and unpack their payloads — all in a single pipeline, on any platform.

No macOS required — works on Linux and Windows too.

Why dpp?

dpp is the only Rust library that chains the entire Apple package extraction pipeline into a single API.

Without dpp, extracting files from a macOS .dmg requires 4 separate tools:

DMG file → [dmg tool] → raw partition → [hfs tool] → pkg file → [xar tool] → payload → [pbzx tool] → files

With dpp:

let files = dpp::extract_pkg_payload("image.dmg", "/path/to.pkg", "component")?;

Features

Pipeline

┌─────────┐    ┌─────────┐    ┌─────────┐    ┌─────────┐
│  UDIF   │───▶│  HFS+   │───▶│   XAR   │───▶│  PBZX   │
│  (DMG)  │    │ (volume)│    │  (PKG)  │    │ (files) │
└─────────┘    └─────────┘    └─────────┘    └─────────┘
     udif         hfsplus         xara           pbzx

Extraction Modes

Quick Start

Browse a DMG

use dpp::{DmgPipeline, ExtractMode};

// Open DMG and extract HFS+ volume
let mut pipeline = DmgPipeline::open("Kernel_Debug_Kit.dmg")?;
let mut hfs = pipeline.open_hfs()?;

// List root directory
for entry in hfs.list_directory("/")? {
    println!("{:?} {:>12} {}", entry.kind, entry.size, entry.name);
}

// Read a file
let data = hfs.read_file("/Library/Developer/KDKs/readme.txt")?;

Extract a PKG Payload

// Open a .pkg found on the HFS+ volume
let mut pkg = hfs.open_pkg("/path/to/installer.pkg")?;

// List components
for component in pkg.components() {
    println!("Component: {}", component);
}

// Extract payload (PBZX archive)
let payload = pkg.payload("com.apple.pkg.KDK")?;
let archive = pbzx::Archive::from_reader(std::io::Cursor::new(payload))?;

// List files in the payload
for entry in archive.list()? {
    println!("{}: {} bytes", entry.path, entry.size);
}

One-Call Extraction

// Find all .pkg files in a DMG
let packages = dpp::find_packages("image.dmg")?;
for pkg_path in &packages {
    println!("Found: {}", pkg_path);
}

// Extract a specific component payload in one call
let archive = dpp::extract_pkg_payload(
    "image.dmg",
    "/path/to/installer.pkg",
    "com.apple.pkg.KDK",
)?;

for entry in archive.list()? {
    println!("{}", entry.path);
}

Low-Memory Streaming

// Use TempFile mode for large DMGs (default)
let mut hfs = pipeline.open_hfs()?;

// Stream a PKG through a temp file instead of buffering
let mut pkg = hfs.open_pkg_streaming("/large-installer.pkg")?;

// Stream payload to disk
let mut out = std::fs::File::create("payload.pbzx")?;
pkg.payload_to("component", &mut out)?;

Documentation

Example Output

$ dpp-tool info Kernel_Debug_Kit.dmg

  DMG Pipeline: Kernel_Debug_Kit.dmg
  ════════════════════════════════════════════════════════════

  DMG (UDIF)
  ────────────────────────────────────────────────────────────
  Version                  4
  Partitions               7
  Compressed               975.87 MB (975.87 MB)
  Uncompressed             1.12 GB
  Space savings            15.0%
  Block types              LZFSE: 988

    ID       Sectors          Size    Ratio  Name
    ----------------------------------------------------------
    -1             1         512 B     89.6%  MBR : 0
     2       2089050    1020.04 MB      4.3%  Apple_HFSX : 3

  HFS+ Volume
  ────────────────────────────────────────────────────────────
  Signature                HFSX (case-sensitive)
  Version                  5
  Block size               4096 bytes
  Files                    3,847
  Folders                  612

  Packages
  ────────────────────────────────────────────────────────────
  └── /Library/Developer/KDKs/KDK_14.2_23C64.pkg  512.30 MB

$ dpp-tool hfs tree Kernel_Debug_Kit.dmg /Library/Developer/KDKs

  Tree: Kernel_Debug_Kit.dmg:/Library/Developer/KDKs
  ════════════════════════════════════════════════════════════

  ├── KDK_14.2_23C64.pkg  512.30 MB
  ├── readme.txt  1.22 KB
  └── LICENSE.txt  4.78 KB

$ dpp-tool payload ls Kernel_Debug_Kit.dmg /path.pkg com.apple.pkg.KDK /usr

  Payload: com.apple.pkg.KDK — /usr
  ════════════════════════════════════════════════════════════

  Kind          Size  Name
  --------------------------------------------------------
  dir              -  lib
  dir              -  share
              12.19 KB  libfoo.dylib

  1 file(s), 2 directory(ies)

Alternatives

There is no equivalent single-crate solution in Rust. The closest approach is to manually combine separate tools:

Choose dpp if you need:

• End-to-end DMG → files extraction on any platform
• Single Rust dependency for the entire pipeline
• Memory-efficient streaming for large disk images
• Programmatic access to macOS installer contents

Next Steps

• APFS support — handle APFS containers in DMGs (requires new crate)
• Encrypted DMG — support FileVault-encrypted disk images
• Parallel extraction — decompress multiple partitions concurrently
• Progress callbacks — report extraction progress for UI integration
• Selective extraction — extract specific files without full pipeline
• DMG creation pipeline — reverse pipeline: files → PBZX → PKG → HFS+ → DMG
• no_std support — enable embedded/WASM usage for core parsing
• Flat PKG without DMG — support direct .pkg file opening

License

MIT