Repository navigation
Linux AppImage helper: pkexec front-end + uaccess-first (drop mandatory input group) #173
Description
Activity
- added a commit that references this issue
on Sep 30, 2026 Merged in #175 (
e0dc69e). Keeping this open for the one human step.Human verification (non-Nix distro):
-
pkexec ./deckd-install-system-integration.sh ./deckd-<version>-x86_64.AppImagepops the polkit password dialog and completes the install. - No relogin is needed afterwards for injection (uaccess ACL on
/dev/uinput). - The printed
--uninstallcommand (same front-end) removes only what was installed.
NixOS testers: pkexec resets
PATHwith no system profile — usesudo, orpkexec /run/current-system/sw/bin/bash ./deckd-install-system-integration.sh ....Already verified: sandboxed install/uninstall across non-member ±
--add-group, pre-existing member, pkexec vs sudo resolution, the--assetsexit-code fix,pytest778,pyrightclean, bundled helper diffed against source.-
Follow-up to #171 (Linux AppImage packaging, phase 0 of #168).
The one-time install helper works and is verified, but the root step can be friendlier and smaller:
pkexec ./deckd-install-system-integration.sh ./deckd-<version>-x86_64.AppImageand get the native polkit password dialog instead of a terminal
sudo. The helper must resolve the target user fromPKEXEC_UIDas well asSUDO_USER, and print the rerun/uninstall command matching how it was invoked. Keepsudodocumented for headless/SSH.TAG+="uaccess", so on logind desktops the active seat user gets an ACL on/dev/uinput— theinputgroup add (and its "log out and back in") is unnecessary for the autostart-at-login case. Make the group opt-in (--add-group) for linger/headless setups and reword the install output./dev/uinputcan't be opened, surface a one-time-setup notice (client banner or log line) with the exact command — an on-demand prompt like balenaEtcher, as a notice rather than a blocker.Verification: re-run the sandboxed install→uninstall lifecycle (pre-existing group/extension/icon preserved) plus the live-session focus/injection checks; confirm the pkexec path on a real desktop.