I spent a while figuring this one out. Here is what I did to render it [Solved] on my Dad's new Sonoma iMac. (BTW: I caused this problem in the first place by enabling his nfsd service, then adding and tagging the snapshot as bootable)
-
Boot into recovery mode, open the terminal and disable SIP
csrutil disable
-
Reboot at this point back into Recovery mode and this time open up DiskUtil
You should now be able to see the system snapshot that is causing the issue, however you will not be able to delete it (since it is the active boot snapshot) So, instead, take careful note of the previous snapshot - it might have a name like:
com.apple.os.update-5E4DF785AD9E60757D57924284549E29EECDBFE5942B5587D41DEAD049A903BE
-
Now exit DiskUtil and go back into Terminal, then mount the booting hard disk as rw:
mount -uw /Volumes/Macintosh\ HD
-
Now 'tag' the official snapshot as the next bootable one:
/System/Library/Filesystems/apfs.fs/Contents/Resources/apfs_systemsnapshot -r "SnapshotName" -v /Volumes/Macintosh\ HD
(replace SnapshotName with the name of your snaphot. (like the one I showed)
-
Now exit the terminal and go back into DiskUtil
Now you can view the snapshot and should be able to delete the offending one if you want to. (select it and click the minus sign at the bottom left)
-
Exit DiskUtil and go back to the terminal (last time I promise) and re-enable SIP:
csrutil enable
-
Reboot back into MacOS and your apple sanctioned update should proceed without any errors
Thanks. I use Carbon Copy Cloner (latest version, 7.0.4) rather than Time Machine for my incremental backups, so I also reached out to Bombich.com for help. I was told:
"As a way to secure the OS, the macOS now runs from an encrypted snapshot, leaving the actual volume untouched.
This system snapshot can not be removed.
CCC will show any removable snapshots in the volume information for that volume. Select the volume name from the list on the left side of the screen."
I didn't see any "removable" snapshots.
When I asked why the system snapshot had just appeared in Disk Utility about 3 days ago, and why the Finder is displaying about 45 G less available space than before that snapshot appeared in Disk Utility, I was told that they didn't have an answer because they could only view my Carbon Copy Cloner logs. Now I'm wondering whether my issue is different from the one for which you found a solution. Do you have a way to know whether the issue you've described differs from mine? Thanks again.