LiveContainer is an iOS application that acts as a runtime host for running third-party iOS apps (guest apps) without actually installing them. It leverages extensive reverse engineering of Apple's dyld, Mach-O binary format, and private iOS APIs to bypass code signing, inject tweaks (via CydiaSubstrate/ElleKit), manage multiple data containers per app, and provide multitasking (floating dock, Picture-in-Picture). The project includes a full code signing library (ZSign), a dyld validation bypass, hooking infrastructure, and integration with AltStore/SideStore for certificate import and app refreshing. The architecture is modular with separate targets for the main app, SwiftUI UI, tweak loader, signing library, process launcher, and share extension. While the code demonstrates deep iOS internals knowledge and is actively maintained, its heavy reliance on private APIs and dyld internals makes it fragile across iOS versions and limits the reusability of most components outside this specific project.
This repository is the content and configuration backend for the WSF iOS sideloading service, centered on the Portal app. It contains no application source code; instead it stores static distribution assets: an AltStore-compatible app repository manifest (repo/app-repo.json), pre-signed IPA binaries for Portal under various enterprise certificates (portal/signed/), JSON configuration files consumed by the Portal app (portal/configurationfiles/), markdown installation and usage guides (portal/guides/), and DNS allow/deny lists designed to block Apple's certificate-revocation endpoints (documents/dns/). In production, the Portal iOS app fetches updates, downloads, guide listings, and app metadata from this repository via raw GitHub or a Netlify-hosted website, while users sideload the signed IPAs directly. The architecture is a flat static-file distribution model: no servers, no build pipeline, and no runtime logic exist in this repo. The most notable technical asset is the curated DNS filter list that blocks Apple OCSP/CRL/App Attest domains while allowlisting essential services like push notifications, iCloud, and the App Store — a circumvention technique to prevent certificate revocations. The repository also includes legal documents (privacy policy and terms of service) governing the sale of signing certificates, which are processed through Stripe and supported via Discord. As a software asset, this repo has no code to build, test, or refactor; its value lies in the structured JSON, the domain-specific DNS lists, and the curated guides. It is functional and organized for its niche purpose, but has minimal reusability beyond serving as a template for similar sideloading distribution repos.