Grant the live user passwordless polkit on the ISOs #76

Merged
TheDarkWizard merged 1 commit from liveuser-polkit into main 2026-07-20 06:10:52 +00:00

Fixes the dead "Install to Hard Drive" button on the noctalia edition ISOs.

liveinst re-execs itself via pkexec. From a terminal pkexec authenticates on the TTY (why liveinst-in-terminal works); from the launcher it needs the session polkit agent, and on the Noctalia live session that fails silently with no dialog, so the click looks dead. Fedora's official live ISOs avoid this by granting liveuser passwordless polkit in their live kickstarts, which titanoboa doesn't use, and livesys-scripts ships no equivalent rule.

Adds the standard liveuser rule in iso/build.sh's live-prep layer, so it exists only on the live medium and never reaches installed systems. Applies to all editions and also silences other live-session polkit prompts.

Verify: dispatch a niri-noctalia ISO after merge, boot it, click Install to Hard Drive.

Fixes the dead "Install to Hard Drive" button on the noctalia edition ISOs. liveinst re-execs itself via pkexec. From a terminal pkexec authenticates on the TTY (why liveinst-in-terminal works); from the launcher it needs the session polkit agent, and on the Noctalia live session that fails silently with no dialog, so the click looks dead. Fedora's official live ISOs avoid this by granting liveuser passwordless polkit in their live kickstarts, which titanoboa doesn't use, and livesys-scripts ships no equivalent rule. Adds the standard liveuser rule in iso/build.sh's live-prep layer, so it exists only on the live medium and never reaches installed systems. Applies to all editions and also silences other live-session polkit prompts. Verify: dispatch a niri-noctalia ISO after merge, boot it, click Install to Hard Drive.
Grant the live user passwordless polkit on the ISOs
Some checks failed
bluebuild / Check if a rebuild is needed (pull_request) Has been cancelled
bluebuild / Release (pull_request) Has been cancelled
bluebuild / Generate Release (pull_request) Has been cancelled
PR Rebase Hint / Post rebase command (pull_request) Has been cancelled
39c15e40f2
liveinst re-execs itself through pkexec, so the Install to Hard Drive
launcher entry only works if the session's polkit agent fields the
prompt. On the Noctalia editions that auth dies silently: clicking the
entry spawns liveinst, pkexec fails with no dialog, and nothing ever
appears. Running liveinst from a terminal works because pkexec falls
back to TTY auth there, which is what masked this during boot tests.

Fedora's official live media grant liveuser passwordless polkit in
their live kickstarts; titanoboa doesn't use those and livesys-scripts
ships no such rule, so our ISOs missed it. Add the standard rule in
the live-prep layer. It only exists on the live medium, never on
installed systems, and it also stops other polkit password prompts
from popping in live sessions on every edition.
Sign in to join this conversation.
No description provided.