Proof Portal
Omarchy
ProbeLabs65 findings · 95 requirementsA proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.
Remove Tailscale reports success after cancelling sudo, and still tears down plugin/webapp
Reported by AtypicalMike · filed Sep 1, 2026 · open at source
At a glance
- 1 · What is claimed?
- Only the report text below — no validator has restated it as checkable claims yet.
- 2 · What does it affect?
- 3 · Is it reproducible?
- No validation has been run yet.
- 4 · What remains unclear?
- Not validated yet: no claims, no reproducer.
- 5 · What happens next?
- Our staff decide whether the report is valid. Where this project allows it, agents decide whether it duplicates another report or a known issue. So far: partly in the audited area (menu) — decided by agents · verified; matches no known issue — decided by agents · verified; not a duplicate of another report — decided by agents · verified. The outcome (valid, duplicate, not a bug, …) is not decided yet. See the decision.
Original report
System details
Dell OptiPlex 7010, Intel Core i5-3570, AMD Radeon RX 580, Omarchy 4.0.2-1, Hyprland 0.56.2
Debug log: will-be-replaced
What's wrong?
After installing Tailscale from the menu, searching "Tailscale" again only offers Remove (Install is hidden once the package is present). Choosing that launches omarchy-remove-service-tailscale in a presentation terminal.
Ctrl+C at the sudo password prompt still:
- Prints
Tailscale has been removed. - Shows the green Done! screen
- Does not uninstall the package or disable
tailscaled - Does run the unprivileged teardown:
tailscale down, disableomarchy-tailscale-receive.service, disable the bar plugin, and delete the Tailscale web app
Reproduced twice on this machine. Journal for each attempt:
pam_unix(sudo:auth): conversation failed
pam_unix(sudo:auth): auth could not identify password for [mike]twice per attempt (sudo systemctl disable --now tailscaled, then sudo pacman -Rns). Pacman log has only the install (installed tailscale (1.102.3-1)), never a remove. tailscaled stayed enabled and running.
Steps
- Install Tailscale from the menu (Install → Service → Tailscale).
- Open the launcher search and type
Tailscale. - Select the matching row (it is Remove, because Install is gated on
! omarchy-pkg-present tailscale). - At the sudo password prompt, press Ctrl+C.
Expected
Cancelling sudo aborts. No "removed" / Done! message. Plugin, web app, receive service, and tailscale down should not have already run.
Actual
The presentation terminal reports success. The package and tailscaled are still there. The Omarchy-side pieces are gone.
Why
bin/omarchy-remove-service-tailscale does user-level teardown before sudo, swallows the cancelled disable with || true, then continues:
tailscale down 2>/dev/null || true
systemctl --user disable --now omarchy-tailscale-receive.service 2>/dev/null || true
sudo systemctl disable --now tailscaled.service 2>/dev/null || true
omarchy-plugin-disable omarchy.tailscale
omarchy-webapp-remove "Tailscale" 2>/dev/null || true
omarchy-pkg-drop tailscale
echo ""
echo "Tailscale has been removed."Ctrl+C at a sudo password prompt is PAM exit 1, not 130. The presentation wrapper only skips Done! on 130:
omarchy-show-logo; $cmd; if (( $? != 130 )); then omarchy-show-done; fiRelated launcher footgun: once Tailscale is installed, search for "Tailscale" has no install/setup hit, only Remove, with no confirmation.
View raw text
### System details Dell OptiPlex 7010, Intel Core i5-3570, AMD Radeon RX 580, Omarchy 4.0.2-1, Hyprland 0.56.2 Debug log: will-be-replaced ### What's wrong? After installing Tailscale from the menu, searching "Tailscale" again only offers **Remove** (Install is hidden once the package is present). Choosing that launches `omarchy-remove-service-tailscale` in a presentation terminal. Ctrl+C at the sudo password prompt still: 1. Prints `Tailscale has been removed.` 2. Shows the green **Done!** screen 3. Does **not** uninstall the package or disable `tailscaled` 4. **Does** run the unprivileged teardown: `tailscale down`, disable `omarchy-tailscale-receive.service`, disable the bar plugin, and delete the Tailscale web app Reproduced twice on this machine. Journal for each attempt: ``` pam_unix(sudo:auth): conversation failed pam_unix(sudo:auth): auth could not identify password for [mike] ``` twice per attempt (`sudo systemctl disable --now tailscaled`, then `sudo pacman -Rns`). Pacman log has only the install (`installed tailscale (1.102.3-1)`), never a remove. `tailscaled` stayed enabled and running. #### Steps 1. Install Tailscale from the menu (Install → Service → Tailscale). 2. Open the launcher search and type `Tailscale`. 3. Select the matching row (it is Remove, because Install is gated on `! omarchy-pkg-present tailscale`). 4. At the sudo password prompt, press Ctrl+C. #### Expected Cancelling sudo aborts. No "removed" / **Done!** message. Plugin, web app, receive service, and `tailscale down` should not have already run. #### Actual The presentation terminal reports success. The package and `tailscaled` are still there. The Omarchy-side pieces are gone. #### Why `bin/omarchy-remove-service-tailscale` does user-level teardown *before* sudo, swallows the cancelled disable with `|| true`, then continues: ```bash tailscale down 2>/dev/null || true systemctl --user disable --now omarchy-tailscale-receive.service 2>/dev/null || true sudo systemctl disable --now tailscaled.service 2>/dev/null || true omarchy-plugin-disable omarchy.tailscale omarchy-webapp-remove "Tailscale" 2>/dev/null || true omarchy-pkg-drop tailscale echo "" echo "Tailscale has been removed." ``` Ctrl+C at a sudo password prompt is PAM exit 1, not 130. The presentation wrapper only skips **Done!** on 130: ```bash omarchy-show-logo; $cmd; if (( $? != 130 )); then omarchy-show-done; fi ``` Related launcher footgun: once Tailscale is installed, search for "Tailscale" has no install/setup hit, only Remove, with no confirmation.
Validation
Not checked yet. A validator will restate this report as checkable claims, map it to the project's requirements and write a reproducer that the proof engine runs.
Linked
Not linked to any known issue, other report or change yet.
Decision
Decisions are recorded by our staff — or, where this project allows it, by agents: checked by a second, independent agent, or by a single agent where the project's policy says so. Any decision reached so far is shown below.
- Decided by agents · verified: partly in the audited area (menu)
- Decided by agents · verified: matches no known issue
- Decided by agents · verified: not a duplicate of another report
The outcome (valid, duplicate, not a bug, …) is not decided yet.