launchd: fix user domain agents

User-domain agents need the Background session type to bootstrap into user/501, and activation should fail rather than silently unloading services when launchctl bootstrap fails.
2026-06-30 23:17:56 -05:00 · 2026-06-30 23:17:56 -05:00 · 2f3da3d45f
commit 2f3da3d45f
parent 2a37d71bbe
30 changed files with 208 additions and 28 deletions
--- a/tests/modules/services/borgmatic/darwin/expected-agent.plist
+++ b/tests/modules/services/borgmatic/darwin/expected-agent.plist
@ -4,6 +4,8 @@
 <dict>
 	<key>Label</key>
 	<string>org.nix-community.home.borgmatic</string>
+	<key>LimitLoadToSessionType</key>
+	<string>Background</string>
 	<key>ProcessType</key>
 	<string>Background</string>
 	<key>ProgramArguments</key>
--- a/tests/modules/services/colima/darwin/colima-docker-cli-expected.plist
+++ b/tests/modules/services/colima/darwin/colima-docker-cli-expected.plist
@ -22,6 +22,8 @@
 	</dict>
 	<key>Label</key>
 	<string>org.nix-community.home.colima-default</string>
+	<key>LimitLoadToSessionType</key>
+	<string>Background</string>
 	<key>ProgramArguments</key>
 	<array>
 		<string>/bin/sh</string>
--- a/tests/modules/services/colima/darwin/expected-agent.plist
+++ b/tests/modules/services/colima/darwin/expected-agent.plist
@ -18,6 +18,8 @@
 	</dict>
 	<key>Label</key>
 	<string>org.nix-community.home.colima-default</string>
+	<key>LimitLoadToSessionType</key>
+	<string>Background</string>
 	<key>ProgramArguments</key>
 	<array>
 		<string>/bin/sh</string>
--- a/tests/modules/services/emacs/darwin/expected-agent.plist
+++ b/tests/modules/services/emacs/darwin/expected-agent.plist
@ -11,6 +11,8 @@
 	</dict>
 	<key>Label</key>
 	<string>org.nix-community.home.emacs</string>
+	<key>LimitLoadToSessionType</key>
+	<string>Background</string>
 	<key>ProgramArguments</key>
 	<array>
 		<string>/bin/sh</string>
--- a/tests/modules/services/git-sync/darwin/expected-agent.plist
+++ b/tests/modules/services/git-sync/darwin/expected-agent.plist
@ -4,6 +4,8 @@
 <dict>
 	<key>Label</key>
 	<string>org.nix-community.home.git-sync-test</string>
+	<key>LimitLoadToSessionType</key>
+	<string>Background</string>
 	<key>ProcessType</key>
 	<string>Background</string>
 	<key>ProgramArguments</key>
--- a/tests/modules/services/glance/default-settings.nix
+++ b/tests/modules/services/glance/default-settings.nix
@ -18,6 +18,8 @@
      serviceFile=$(normalizeStorePaths $serviceFile)
      assertFileExists "$serviceFile"
      assertFileContent "$serviceFile" ${./glance.plist}
+      assertFileContains "$serviceFile" '<key>LimitLoadToSessionType</key>'
+      assertFileContains "$serviceFile" '<string>Background</string>'

      domainFile=LaunchAgentDomains/org.nix-community.home.glance.domain
      assertFileContent "$domainFile" ${builtins.toFile "expected-domain" "user\n"}
--- a/tests/modules/services/glance/glance.plist
+++ b/tests/modules/services/glance/glance.plist
@ -6,6 +6,8 @@
 	<true/>
 	<key>Label</key>
 	<string>org.nix-community.home.glance</string>
+	<key>LimitLoadToSessionType</key>
+	<string>Background</string>
 	<key>ProgramArguments</key>
 	<array>
 		<string>/bin/sh</string>
--- a/tests/modules/services/gpg-agent/expected-agent.plist
+++ b/tests/modules/services/gpg-agent/expected-agent.plist
@ -16,6 +16,8 @@
 	</dict>
 	<key>Label</key>
 	<string>org.nix-community.home.gpg-agent</string>
+	<key>LimitLoadToSessionType</key>
+	<string>Background</string>
 	<key>ProcessType</key>
 	<string>Background</string>
 	<key>ProgramArguments</key>
--- a/tests/modules/services/home-manager-auto-expire/darwin/expected-agent.plist
+++ b/tests/modules/services/home-manager-auto-expire/darwin/expected-agent.plist
@ -4,6 +4,8 @@
 <dict>
 	<key>Label</key>
 	<string>org.nix-community.home.home-manager-auto-expire</string>
+	<key>LimitLoadToSessionType</key>
+	<string>Background</string>
 	<key>ProcessType</key>
 	<string>Background</string>
 	<key>ProgramArguments</key>
--- a/tests/modules/services/imapnotify/darwin/launchd.plist
+++ b/tests/modules/services/imapnotify/darwin/launchd.plist
@ -13,6 +13,8 @@
 	<true/>
 	<key>Label</key>
 	<string>org.nix-community.home.imapnotify-hm-example.com</string>
+	<key>LimitLoadToSessionType</key>
+	<string>Background</string>
 	<key>ProcessType</key>
 	<string>Background</string>
 	<key>ProgramArguments</key>
--- a/tests/modules/services/nix-gc/darwin/expected-agent.plist
+++ b/tests/modules/services/nix-gc/darwin/expected-agent.plist
@ -4,6 +4,8 @@
 <dict>
 	<key>Label</key>
 	<string>org.nix-community.home.nix-gc</string>
+	<key>LimitLoadToSessionType</key>
+	<string>Background</string>
 	<key>ProgramArguments</key>
 	<array>
 		<string>/bin/sh</string>
--- a/tests/modules/services/ollama/darwin/expected-agent.plist
+++ b/tests/modules/services/ollama/darwin/expected-agent.plist
@ -20,6 +20,8 @@
 	</dict>
 	<key>Label</key>
 	<string>org.nix-community.home.ollama</string>
+	<key>LimitLoadToSessionType</key>
+	<string>Background</string>
 	<key>ProcessType</key>
 	<string>Background</string>
 	<key>ProgramArguments</key>
--- a/tests/modules/services/podman/darwin/basic-expected-agent.plist
+++ b/tests/modules/services/podman/darwin/basic-expected-agent.plist
@ -11,6 +11,8 @@
 	</dict>
 	<key>Label</key>
 	<string>org.nix-community.home.podman-machine-podman-machine-default</string>
+	<key>LimitLoadToSessionType</key>
+	<string>Background</string>
 	<key>ProcessType</key>
 	<string>Background</string>
 	<key>ProgramArguments</key>
--- a/tests/modules/services/podman/darwin/custom-machines-dev-expected-agent.plist
+++ b/tests/modules/services/podman/darwin/custom-machines-dev-expected-agent.plist
@ -11,6 +11,8 @@
 	</dict>
 	<key>Label</key>
 	<string>org.nix-community.home.podman-machine-dev-machine</string>
+	<key>LimitLoadToSessionType</key>
+	<string>Background</string>
 	<key>ProcessType</key>
 	<string>Background</string>
 	<key>ProgramArguments</key>
--- a/tests/modules/services/proton-pass-agent/basic-service-expected.plist
+++ b/tests/modules/services/proton-pass-agent/basic-service-expected.plist
@ -6,6 +6,8 @@
 	<true/>
 	<key>Label</key>
 	<string>org.nix-community.home.proton-pass-agent</string>
+	<key>LimitLoadToSessionType</key>
+	<string>Background</string>
 	<key>ProcessType</key>
 	<string>Background</string>
 	<key>ProgramArguments</key>
--- a/tests/modules/services/proton-pass-agent/full-service-expected.plist
+++ b/tests/modules/services/proton-pass-agent/full-service-expected.plist
@ -6,6 +6,8 @@
 	<true/>
 	<key>Label</key>
 	<string>org.nix-community.home.proton-pass-agent</string>
+	<key>LimitLoadToSessionType</key>
+	<string>Background</string>
 	<key>ProcessType</key>
 	<string>Background</string>
 	<key>ProgramArguments</key>
--- a/tests/modules/services/ssh-agent/darwin/basic-service-expected.plist
+++ b/tests/modules/services/ssh-agent/darwin/basic-service-expected.plist
@ -11,6 +11,8 @@
 	</dict>
 	<key>Label</key>
 	<string>org.nix-community.home.ssh-agent</string>
+	<key>LimitLoadToSessionType</key>
+	<string>Background</string>
 	<key>ProcessType</key>
 	<string>Background</string>
 	<key>ProgramArguments</key>
--- a/tests/modules/services/ssh-agent/darwin/pkcs11-service-expected.plist
+++ b/tests/modules/services/ssh-agent/darwin/pkcs11-service-expected.plist
@ -11,6 +11,8 @@
 	</dict>
 	<key>Label</key>
 	<string>org.nix-community.home.ssh-agent</string>
+	<key>LimitLoadToSessionType</key>
+	<string>Background</string>
 	<key>ProcessType</key>
 	<string>Background</string>
 	<key>ProgramArguments</key>
--- a/tests/modules/services/ssh-agent/darwin/timeout-service-expected.plist
+++ b/tests/modules/services/ssh-agent/darwin/timeout-service-expected.plist
@ -11,6 +11,8 @@
 	</dict>
 	<key>Label</key>
 	<string>org.nix-community.home.ssh-agent</string>
+	<key>LimitLoadToSessionType</key>
+	<string>Background</string>
 	<key>ProcessType</key>
 	<string>Background</string>
 	<key>ProgramArguments</key>
--- a/tests/modules/services/syncthing/expected-agent.plist
+++ b/tests/modules/services/syncthing/expected-agent.plist
@ -11,6 +11,8 @@
 	</dict>
 	<key>Label</key>
 	<string>org.nix-community.home.syncthing</string>
+	<key>LimitLoadToSessionType</key>
+	<string>Background</string>
 	<key>ProcessType</key>
 	<string>Background</string>
 	<key>ProgramArguments</key>
--- a/tests/modules/services/yubikey-agent/darwin/service.nix
+++ b/tests/modules/services/yubikey-agent/darwin/service.nix
@ -23,6 +23,8 @@
      	</dict>
      	<key>Label</key>
      	<string>org.nix-community.home.yubikey-agent</string>
+      ${"\t"}<key>LimitLoadToSessionType</key>
+      ${"\t"}<string>Background</string>
      	<key>ProcessType</key>
      	<string>Background</string>
      	<key>ProgramArguments</key>