Sovran_Systems/Sovran_SystemsOS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,913 Commits 3 Branches 4 Tags
881587c42ae3519ad438bd0aff58592c03d7ce91
Commit Graph
18 Commits
Author SHA1 Message Date
copilot-swe-agent[bot]andGitHub fd5f651f2c fix(rdp): run grdctl --system directly as root, remove runuser/polkit/util-linux 
Root cause: gnome-remote-desktop-setup.service ran as root but dropped
privileges via `runuser -u gnome-remote-desktop`. Non-root grdctl --system
attempts authorisation through pkexec. The Nix-store pkexec binary is not
setuid, so every system-mode credential call silently failed while the script
still printed "configured successfully". GNOME Remote Desktop then started
without applied credentials, causing Remmina to loop at the login dialog.

Fix:
- Remove `runuser -u gnome-remote-desktop --` from grdctl_system helper;
  the root-run oneshot service can call grdctl --system directly.
- Remove pkgs.polkit and pkgs.util-linux from the setup service path as
  neither polkit nor runuser is needed any more.
- Update tests: rename test_setup_runs_grdctl_as_gnome_remote_desktop_user
  to test_setup_runs_grdctl_directly_as_root and assert that runuser,
  pkexec, and sudo are absent; add
  test_privilege_escalation_packages_absent_from_setup_path.

All 21 app/tests pass.
 2026-07-14 00:28:17 +00:00
copilot-swe-agent[bot]andGitHub 7592bda57a fix: apply hub-managed GRD credentials at boot 2026-07-13 23:54:08 +00:00
copilot-swe-agent[bot]andGitHub 47f496efcf fix: tighten GRD boot credential setup 2026-07-13 23:48:12 +00:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		c4238f2590 fix(rdp): add wantedBy block and remove || true from grdctl enable 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/47126fb3-6167-424d-9599-cd75e6447717

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-08 22:11:23 +00:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		1bbf6094b3 revert: restore rdp.nix to pre-PR#147 working state with || true fix 
- Remove systemd.services."gnome-remote-desktop".wantedBy = lib.mkForce []
  (was preventing the service from ever auto-starting)
- Remove systemctl start gnome-remote-desktop.service || true
  (was creating a systemd deadlock with before = ["gnome-remote-desktop.service"])
- Remove pkgs.systemd from setup script path
- Remove grdctl --system rdp disable-view-only || true
- Add || true to grdctl --system rdp enable (suppress harmless EROFS warning)

Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/75c67389-947f-437d-95ba-427504935156

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-08 21:29:48 +00:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		ebd41797f7 Fix RDP: revert to system-level approach with declarative service masking and explicit start 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/cedebc7f-683e-469d-bd91-a0b87495d055

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-08 21:02:49 +00:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		e3916d48dd Fix RDP on NixOS: declarative service masking instead of grdctl --system rdp disable 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/0701acec-7c63-419b-be17-57a912daedaf

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-08 20:43:35 +00:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		b77fb2ed70 Fix RDP Session Already Running by using user-session screen sharing 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/ab7b63b5-2a0a-4933-9fb2-36ac793e9f1a

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-08 18:18:04 +00:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		45ee8da166 fix(rdp): remove session-level setup to fix Session Already Running conflict 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/9ba5618b-db30-41c3-8031-68b9a9e5448c

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-08 17:50:40 +00:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		0f1ebe339e Use warning message for system-level disable-view-only for consistency 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/7683cf3e-15ca-4f1b-a485-5522fa4d6cd6

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-08 17:38:54 +00:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		4bbf7a3a67 Fix RDP frozen/unclickable screen: desktop whitespace, disable-view-only session+system 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/7683cf3e-15ca-4f1b-a485-5522fa4d6cd6

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-08 17:38:24 +00:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		5ab4021100 Fix RDP frozen screen: add session-level GNOME Remote Desktop configuration 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/e099592f-2d1e-4894-a91c-b4ef9b4a5244

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-08 14:46:52 +00:00
naturallaw777 801b46b95f deeper fix for RDP regeneration 2026-04-03 07:16:01 -05:00
naturallaw777 bc7a9d96da deeper fix for RDP regeneration 2026-04-03 07:10:40 -05:00
naturallaw777 1f273d9229 fix for RDP regeneration 2026-04-03 07:08:09 -05:00
naturallaw777 c4307f358c fixed RDP layout 2026-04-02 16:48:01 -05:00
naturallaw777 b63ad15cc1 fixed RDP layout 2026-04-02 16:45:27 -05:00
naturallaw777 e1e9376792 initial retooling 2026-03-27 14:23:08 -05:00