yukart/svc-gw
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

reboot command beside poweroff, one polkit grant; forward yukart/gnss/+; mock uses current names
/ crosscheck (push) Successful in 0s
Details
Rust (L4T) / Clippy, test, build, glibc (push) Successful in 4s
Details

Browse Source 
--allow-poweroff becomes --allow-power. deploy/50-yukart-gw-power.pkla adds logind's
reboot actions and the deploy removes the old poweroff-only file.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DDwfd6Ki8UfG4hK6W5YpJz
This commit is contained in:
Mikkeli Matlock
2026-10-13 22:50:04 +09:00
parent 133adeb5a5
commit aa72100148
8 changed files with 48 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy/50-yukart-gw-poweroff.pkla → deploy/50-yukart-gw-power.pkla
+6 -5
View File
@@ -1,12 +1,13 @@
# polkit (0.105, local authority): lets the svc-gw user power the host off through
# logind, with no sudo. svc-gw runs `systemctl poweroff` for the display's
# `poweroff` command (contracts BOUNDARY.md). Nothing else is granted.
# polkit (0.105, local authority): lets the svc-gw user power the host off or reboot it
# through logind, with no sudo. svc-gw runs `systemctl poweroff` / `systemctl reboot`
# for the display's `poweroff` and `reboot` commands (contracts BOUNDARY.md). Nothing
# else is granted.
# Installed to /etc/polkit-1/localauthority/50-local.d/ by scripts/deploy.sh.
# multiple-sessions: an ssh login is another session; ignore-inhibit: no inhibitor lock
# (none are taken on this host today) should leave the button silently doing nothing.
[yukart-gw: power off]
[yukart-gw: power off and reboot]
Identity=unix-user:mikkeli
Action=org.freedesktop.login1.power-off;org.freedesktop.login1.power-off-multiple-sessions;org.freedesktop.login1.power-off-ignore-inhibit
Action=org.freedesktop.login1.power-off;org.freedesktop.login1.power-off-multiple-sessions;org.freedesktop.login1.power-off-ignore-inhibit;org.freedesktop.login1.reboot;org.freedesktop.login1.reboot-multiple-sessions;org.freedesktop.login1.reboot-ignore-inhibit
ResultAny=yes
ResultInactive=yes
ResultActive=yes
deploy/yukart-gw.service
+2 -2
View File
@@ -8,8 +8,8 @@ StartLimitIntervalSec=0
[Service]
User=mikkeli
# Add --mock only on a bench unit: every message then says so, and displays must show it.
# --allow-poweroff: the display may shut this host down (contracts BOUNDARY.md, poweroff). Only on the Orin.
ExecStart=/usr/local/bin/yukart-gw --listen 0.0.0.0:7700 --allow-poweroff
# --allow-power: the display may power this host off or reboot it (contracts BOUNDARY.md). Only on the Orin.
ExecStart=/usr/local/bin/yukart-gw --listen 0.0.0.0:7700 --allow-power
Restart=always
RestartSec=2