Proof Portal
Omarchy
ProbeLabs65 findings · 95 requirementsA proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.
closing the lid can suspend the machine mid-update
Reported by Roriz · filed Sep 4, 2026 · open at source
At a glance
- 1 · What is claimed?
- Only the report text below — no validator has restated it as checkable claims yet.
- 2 · What does it affect?
- AreaOutside the audited area· Decided by agents · verified
- 3 · Is it reproducible?
- No validation has been run yet.
- 4 · What remains unclear?
- Not validated yet: no claims, no reproducer.
- 5 · What happens next?
- Decided by agents and verified by a second, independent agent — see the decision.
Original report
System details
12th Gen Intel i7-12700H, Intel Iris Xe + NVIDIA RTX 3070 Mobile, Omarchy 4.0.2-1, systemd 261
What's wrong?
What's wrong?
omarchy-update-stay-awake blocks sleep for the duration of an update:
# bin/omarchy-update-stay-awake:104 and :111 (master @ 4930677)
systemd-inhibit \
--what=sleep:idle \
--who=omarchy-update \
--why="Omarchy update in progress" \
--mode=block \
sleep infinitysleep and idle are both high-level inhibitor locks, and logind ignores those for the lid switch by default. From logind.conf(5), on LidSwitchIgnoreInhibited=:
Controls whether actions that systemd-logind takes when the power, reboot and sleep keys and the lid switch are triggered are subject to high-level inhibitor locks ("shutdown", "reboot", "sleep", "idle"). Low level inhibitor locks ("handle-power-key", "handle-suspend-key", "handle-hibernate-key", "handle-lid-switch", "handle-reboot-key"), are always honored, irrespective of this setting. [...] LidSwitchIgnoreInhibited= defaults to "yes". This means [...] the lid switch does not respect suspend blockers by default.Omarchy ships two logind drop-ins in etc/systemd/logind.conf.d/ (10-ignore-power-button.conf and 20-inhibit-delay.conf), and neither sets LidSwitchIgnoreInhibited, so the default yes applies.
So closing the laptop lid during omarchy update should suspend the machine anyway, despite the inhibitor that exists to prevent exactly that. Worst case it interrupts a pacman transaction.
Steps to reproduce
- On a laptop, start
omarchy update. - Confirm the inhibitor is registered:
systemd-inhibit --listshowsomarchy-update ... sleep:idle ... block. - Close the lid.
- The machine suspends despite the block inhibitor.
Suggested fix
Add the low-level lock, which logind.conf(5) says is always honored regardless of the setting:
- --what=sleep:idle \
+ --what=sleep:idle:handle-lid-switch \That is narrower than the alternative of shipping a drop-in with LidSwitchIgnoreInhibited=no, since it changes this one inhibitor rather than lid policy for every application on the system.
Scope note
I verified steps 1 and 2 and the configuration state. I have not observed step 4 on a live update, because deliberately interrupting a pacman transaction was not something I wanted to do on my own machine. The rest is inferred from logind.conf(5) and from the absence of any LidSwitchIgnoreInhibited setting in the repo. I can confirm on a throwaway install if that would help.
View raw text
### System details
12th Gen Intel i7-12700H, Intel Iris Xe + NVIDIA RTX 3070 Mobile, Omarchy 4.0.2-1, systemd 261
### What's wrong?
## What's wrong?
`omarchy-update-stay-awake` blocks sleep for the duration of an update:
```bash
# bin/omarchy-update-stay-awake:104 and :111 (master @ 4930677)
systemd-inhibit \
--what=sleep:idle \
--who=omarchy-update \
--why="Omarchy update in progress" \
--mode=block \
sleep infinity
```
`sleep` and `idle` are both *high-level* inhibitor locks, and logind ignores those for the lid switch by default. From `logind.conf(5)`, on `LidSwitchIgnoreInhibited=`:
> Controls whether actions that systemd-logind takes when the power, reboot and sleep keys and the lid switch are triggered are subject to high-level inhibitor locks ("shutdown", "reboot", "sleep", "idle"). Low level inhibitor locks ("handle-power-key", "handle-suspend-key", "handle-hibernate-key", "handle-lid-switch", "handle-reboot-key"), are always honored, irrespective of this setting.
>
> [...] `LidSwitchIgnoreInhibited=` defaults to "yes". This means [...] the lid switch does not respect suspend blockers by default.
Omarchy ships two logind drop-ins in `etc/systemd/logind.conf.d/` (`10-ignore-power-button.conf` and `20-inhibit-delay.conf`), and neither sets `LidSwitchIgnoreInhibited`, so the default `yes` applies.
So closing the laptop lid during `omarchy update` should suspend the machine anyway, despite the inhibitor that exists to prevent exactly that. Worst case it interrupts a pacman transaction.
### Steps to reproduce
1. On a laptop, start `omarchy update`.
2. Confirm the inhibitor is registered: `systemd-inhibit --list` shows `omarchy-update ... sleep:idle ... block`.
3. Close the lid.
4. The machine suspends despite the block inhibitor.
### Suggested fix
Add the low-level lock, which `logind.conf(5)` says is always honored regardless of the setting:
```diff
- --what=sleep:idle \
+ --what=sleep:idle:handle-lid-switch \
```
That is narrower than the alternative of shipping a drop-in with `LidSwitchIgnoreInhibited=no`, since it changes this one inhibitor rather than lid policy for every application on the system.
### Scope note
I verified steps 1 and 2 and the configuration state. I have not observed step 4 on a live update, because deliberately interrupting a pacman transaction was not something I wanted to do on my own machine. The rest is inferred from `logind.conf(5)` and from the absence of any `LidSwitchIgnoreInhibited` setting in the repo. I can confirm on a throwaway install if that would help.
Validation
Not checked yet. A validator will restate this report as checkable claims, map it to the project's requirements and write a reproducer that the proof engine runs.
Linked
- Fixed bypr/12419· confirmed
- Fixed bypr/10205· confirmed
- Related PRpr/11525· confirmed
- Related PRpr/12882· confirmed
- Related PRpr/14959· confirmed
Decision
Decisions are recorded by our staff — or, where this project allows it, by agents: checked by a second, independent agent, or by a single agent where the project's policy says so. Any decision reached so far is shown below.
- Out of scopeDecided by agents · verified · 2026-10-09 10:48 UTC