Using dtrace on MacOS with SIP enabled

<h2>The problem</h2> On all current MacOS versions (Catalina 10.15.x, Big Sur 11.x) System Integrity Protection (<code>SIP</code>) is enabled by default and prevents most uses of <code>dtrace</code> and other tools and scripts based on it (i.e. <code>dtruss</code>). The usual way to make dtrace work on MacOS is to boot into recovery mode and disable some of the SIP protections: <pre> csrutil enable --without dtrace</pre> However, this only works if you actually can boot into recovery mode — which isn’t the case if your Mac is in a remote place and you can only access it through some sort of software-based Remote Desktop (i.e. VNC, Apple Remote Desktop, Teamviewer, etc). It’s also not possible (at least not via self-service to the best of my knowledge) to disable SIP on most Mac Cloud providers, like <a href="https://aws.amazon.com/ec2/instance-types/mac/" rel="noopener ugc nofollow" target="_blank">AWS EC2</a>, <a href="https://flow.swiss/mac-bare-metal" rel="noopener ugc nofollow" target="_blank">Flow Swiss</a> or <a href="https://www.macstadium.com/" rel="noopener ugc nofollow" target="_blank">MacStadium</a>. Same for Mac CI runners on services like <a href="https://docs.github.com/en/actions/using-github-hosted-runners/about-github-hosted-runners" rel="noopener ugc nofollow" target="_blank">GitHub Actions</a>. (For AWS, support has confirmed that it’s not possible at all). <a href="https://poweruser.blog/using-dtrace-with-sip-enabled-3826a352e64b">Read More</a>