systemd logged "Unknown key 'StartLimitIntervalSec'" on every start: rate limiting belongs in [Unit], not [Service], so both keys were ignored and the restart limit they were meant to impose did not exist. An agent that failed repeatedly would have flapped rather than stopping. Found while investigating reported prompt failures, which turned out not to be a defect: the trace showed both authentications succeeding on the first attempt. The failures came from testing -- prompts raised by background pkexec runs and then cancelled seconds later, while someone was trying to type into them. Claude-Session: https://claude.ai/code/session_01BRvzt4H8XXLPVH5MyYdk9L
24 lines
848 B
Desktop File
24 lines
848 B
Desktop File
[Unit]
|
|
Description=Panama polkit authentication agent
|
|
# Rate limiting lives in [Unit]. These were in [Service], where systemd ignored
|
|
# them with a warning on every start -- so the restart limit they were meant to
|
|
# impose was not actually in force.
|
|
StartLimitBurst=5
|
|
StartLimitIntervalSec=60
|
|
Documentation=https://github.com/gibbyb/Panama
|
|
# Only one agent may be registered per session, so this must not run alongside
|
|
# the one it replaces.
|
|
Conflicts=hyprpolkitagent.service
|
|
After=graphical-session.target
|
|
PartOf=graphical-session.target
|
|
|
|
[Service]
|
|
Type=simple
|
|
ExecStart=%h/.config/quickshell/scripts/panama-polkit-agent
|
|
# The prompt is drawn by the shell, so an agent that outlives a shell restart
|
|
# would be registered with nowhere to prompt. Restarting reconnects it.
|
|
Restart=on-failure
|
|
RestartSec=2
|
|
[Install]
|
|
WantedBy=graphical-session.target
|