Proof Portal

Project overview

Omarchy

ProbeLabs65 findings · 95 requirements

A proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.

Inbox
ReportR-606GitHub issuePublicDecided· Out of scope

Plymouth set/switcher always fails on pre-4.0 installs: /usr/share/plymouth/themes/omarchy left user-owned

Reported by chrstn-sgrr · filed Sep 13, 2026Closed upstream on 2026-10-11 by the bot omarchybot, as a duplicate (target not recorded).

Decided: Out of scope — decided by agents · verified 3 days ago.

At a glance

1 · What is claimed?
Only the report text below — no validator has restated it as checkable claims yet.
2 · What does it affect?
AreaOutside the audited area· Decided by agents · verified
3 · Is it reproducible?
No validation has been run yet.
4 · What remains unclear?
  • Not validated yet: no claims, no reproducer.
5 · What happens next?
Decided by agents and verified by a second, independent agent — see the decision.

Original report

Plymouth set/switcher always fails on pre-4.0 installs: /usr/share/plymouth/themes/omarchy left user-ownedrevision 1 · captured 2026-09-28 21:23 UTC via poll

Every omarchy plymouth set ... (including switcher selections) fails with:

omarchy-plymouth-set: refusing to publish: directory /usr/share/plymouth/themes/omarchy (must be root-owned and not group- or world-writable) failed validation

The unlock screen stays on default forever. omarchy plymouth reset fails identically — there is no self-repair path.

Expected: the set succeeds, or the refusal tells the user how to repair.

Root cause (verified on my machine)

  • The theme dir was created by the pre-4.0 ISO install (stat Birth 2025-10-13), owned uid 1000, mode 700. I never chowned it.
  • Since 4.0.0 the path is owned by the omarchy-settings package, whose .MTREE expects root-owned 755 — but pacman does not re-chown pre-existing directories on install/upgrade, so the damage persists invisibly.
  • 4.0.x omarchy-plymouth-set validates root ownership before publishing, so it refuses on every system carrying this legacy dir.

Repro

stat -c '%U %a' /usr/share/plymouth/themes/omarchy   # chrstn 700
omarchy plymouth set by theme tokyo-night            # refuses

System: Omarchy 4.0.3-1, Intel i7-7700K, NVIDIA GTX 1070.

Workaround that fixed it

sudo chown root:root + chmod 755 on the dir, then the set succeeds.

Suggested fix

A migration repairing that dir (same pattern as 1788662350.sh, which already repairs other user-owned privileged paths from the pre-4.0 era), or an actionable repair hint in the refusal message.

View raw text
Every `omarchy plymouth set ...` (including switcher selections) fails with:

```
omarchy-plymouth-set: refusing to publish: directory /usr/share/plymouth/themes/omarchy (must be root-owned and not group- or world-writable) failed validation
```

The unlock screen stays on default forever. `omarchy plymouth reset` fails identically — there is no self-repair path.

Expected: the set succeeds, or the refusal tells the user how to repair.

## Root cause (verified on my machine)

- The theme dir was created by the pre-4.0 ISO install (`stat` Birth 2025-10-13), owned `uid 1000`, mode `700`. I never chowned it.
- Since 4.0.0 the path is owned by the `omarchy-settings` package, whose `.MTREE` expects root-owned `755` — but pacman does not re-chown pre-existing directories on install/upgrade, so the damage persists invisibly.
- 4.0.x `omarchy-plymouth-set` validates root ownership before publishing, so it refuses on every system carrying this legacy dir.

## Repro

```bash
stat -c '%U %a' /usr/share/plymouth/themes/omarchy   # chrstn 700
omarchy plymouth set by theme tokyo-night            # refuses
```

System: Omarchy 4.0.3-1, Intel i7-7700K, NVIDIA GTX 1070.

## Workaround that fixed it

`sudo chown root:root` + `chmod 755` on the dir, then the set succeeds.

## Suggested fix

A migration repairing that dir (same pattern as `1788662350.sh`, which already repairs other user-owned privileged paths from the pre-4.0 era), or an actionable repair hint in the refusal message.

Validation

Not checked yet. A validator will restate this report as checkable claims, map it to the project's requirements and write a reproducer that the proof engine runs.

Linked

Not linked to any known issue, other report or change yet.

Decision

Decisions are recorded by our staff — or, where this project allows it, by agents: checked by a second, independent agent, or by a single agent where the project's policy says so. Any decision reached so far is shown below.

  • Out of scopeDecided by agents · verified · 2026-10-09 12:35 UTC