Proof Portal

Project overview

Omarchy

ProbeLabs65 findings · 95 requirements

A proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.

Inbox
ReportR-1133GitHub issuePublicReceived

Remove Tailscale reports success after cancelling sudo, and still tears down plugin/webapp

Reported by AtypicalMike · filed Sep 1, 2026 · open at source

Partly in the audited area (menu) — decided by agents · verified. Not validated yet.

At a glance

1 · What is claimed?
Only the report text below — no validator has restated it as checkable claims yet.
2 · What does it affect?
AreaPartly in the audited areamenu· Decided by agents · verified
3 · Is it reproducible?
No validation has been run yet.
4 · What remains unclear?
  • Not validated yet: no claims, no reproducer.
5 · What happens next?
Our staff decide whether the report is valid. Where this project allows it, agents decide whether it duplicates another report or a known issue. So far: partly in the audited area (menu) — decided by agents · verified; matches no known issue — decided by agents · verified; not a duplicate of another report — decided by agents · verified. The outcome (valid, duplicate, not a bug, …) is not decided yet. See the decision.

Original report

Remove Tailscale reports success after cancelling sudo, and still tears down plugin/webapprevision 1 · captured 2026-09-28 21:24 UTC via poll

System details

Dell OptiPlex 7010, Intel Core i5-3570, AMD Radeon RX 580, Omarchy 4.0.2-1, Hyprland 0.56.2

Debug log: will-be-replaced

What's wrong?

After installing Tailscale from the menu, searching "Tailscale" again only offers Remove (Install is hidden once the package is present). Choosing that launches omarchy-remove-service-tailscale in a presentation terminal.

Ctrl+C at the sudo password prompt still:

  1. Prints Tailscale has been removed.
  2. Shows the green Done! screen
  3. Does not uninstall the package or disable tailscaled
  4. Does run the unprivileged teardown: tailscale down, disable omarchy-tailscale-receive.service, disable the bar plugin, and delete the Tailscale web app

Reproduced twice on this machine. Journal for each attempt:

pam_unix(sudo:auth): conversation failed
pam_unix(sudo:auth): auth could not identify password for [mike]

twice per attempt (sudo systemctl disable --now tailscaled, then sudo pacman -Rns). Pacman log has only the install (installed tailscale (1.102.3-1)), never a remove. tailscaled stayed enabled and running.

Steps

  1. Install Tailscale from the menu (Install → Service → Tailscale).
  2. Open the launcher search and type Tailscale.
  3. Select the matching row (it is Remove, because Install is gated on ! omarchy-pkg-present tailscale).
  4. At the sudo password prompt, press Ctrl+C.

Expected

Cancelling sudo aborts. No "removed" / Done! message. Plugin, web app, receive service, and tailscale down should not have already run.

Actual

The presentation terminal reports success. The package and tailscaled are still there. The Omarchy-side pieces are gone.

Why

bin/omarchy-remove-service-tailscale does user-level teardown before sudo, swallows the cancelled disable with || true, then continues:

tailscale down 2>/dev/null || true
systemctl --user disable --now omarchy-tailscale-receive.service 2>/dev/null || true
sudo systemctl disable --now tailscaled.service 2>/dev/null || true
omarchy-plugin-disable omarchy.tailscale
omarchy-webapp-remove "Tailscale" 2>/dev/null || true
omarchy-pkg-drop tailscale

echo ""
echo "Tailscale has been removed."

Ctrl+C at a sudo password prompt is PAM exit 1, not 130. The presentation wrapper only skips Done! on 130:

omarchy-show-logo; $cmd; if (( $? != 130 )); then omarchy-show-done; fi

Related launcher footgun: once Tailscale is installed, search for "Tailscale" has no install/setup hit, only Remove, with no confirmation.

View raw text
### System details

Dell OptiPlex 7010, Intel Core i5-3570, AMD Radeon RX 580, Omarchy 4.0.2-1, Hyprland 0.56.2

Debug log: will-be-replaced

### What's wrong?

After installing Tailscale from the menu, searching "Tailscale" again only offers **Remove** (Install is hidden once the package is present). Choosing that launches `omarchy-remove-service-tailscale` in a presentation terminal.

Ctrl+C at the sudo password prompt still:

1. Prints `Tailscale has been removed.`
2. Shows the green **Done!** screen
3. Does **not** uninstall the package or disable `tailscaled`
4. **Does** run the unprivileged teardown: `tailscale down`, disable `omarchy-tailscale-receive.service`, disable the bar plugin, and delete the Tailscale web app

Reproduced twice on this machine. Journal for each attempt:

```
pam_unix(sudo:auth): conversation failed
pam_unix(sudo:auth): auth could not identify password for [mike]
```

twice per attempt (`sudo systemctl disable --now tailscaled`, then `sudo pacman -Rns`). Pacman log has only the install (`installed tailscale (1.102.3-1)`), never a remove. `tailscaled` stayed enabled and running.

#### Steps

1. Install Tailscale from the menu (Install → Service → Tailscale).
2. Open the launcher search and type `Tailscale`.
3. Select the matching row (it is Remove, because Install is gated on `! omarchy-pkg-present tailscale`).
4. At the sudo password prompt, press Ctrl+C.

#### Expected

Cancelling sudo aborts. No "removed" / **Done!** message. Plugin, web app, receive service, and `tailscale down` should not have already run.

#### Actual

The presentation terminal reports success. The package and `tailscaled` are still there. The Omarchy-side pieces are gone.

#### Why

`bin/omarchy-remove-service-tailscale` does user-level teardown *before* sudo, swallows the cancelled disable with `|| true`, then continues:

```bash
tailscale down 2>/dev/null || true
systemctl --user disable --now omarchy-tailscale-receive.service 2>/dev/null || true
sudo systemctl disable --now tailscaled.service 2>/dev/null || true
omarchy-plugin-disable omarchy.tailscale
omarchy-webapp-remove "Tailscale" 2>/dev/null || true
omarchy-pkg-drop tailscale

echo ""
echo "Tailscale has been removed."
```

Ctrl+C at a sudo password prompt is PAM exit 1, not 130. The presentation wrapper only skips **Done!** on 130:

```bash
omarchy-show-logo; $cmd; if (( $? != 130 )); then omarchy-show-done; fi
```

Related launcher footgun: once Tailscale is installed, search for "Tailscale" has no install/setup hit, only Remove, with no confirmation.

Validation

Not checked yet. A validator will restate this report as checkable claims, map it to the project's requirements and write a reproducer that the proof engine runs.

Linked

Not linked to any known issue, other report or change yet.

Decision

Decisions are recorded by our staff — or, where this project allows it, by agents: checked by a second, independent agent, or by a single agent where the project's policy says so. Any decision reached so far is shown below.

  • Decided by agents · verified: partly in the audited area (menu)
  • Decided by agents · verified: matches no known issue
  • Decided by agents · verified: not a duplicate of another report

The outcome (valid, duplicate, not a bug, …) is not decided yet.