polkit.sh

#!/bin/bash
# 维护：Yuchen Deng [Zz] QQ群：19346666、111601117

# 确认管理员权限
if [[ $EUID != 0 ]]; then
    echo "请打开终端，在脚本前添加 sudo 执行，或者 sudo -s 获得管理员权限后再执行。"
    exit 1
fi

# 允许无管理员权限启动
pkaction --version #大于105才适合rules，否则pkla
if [[ $(echo $(pkaction --version) | cut -d . -f 2) > 105 ]]; then
    cat > /usr/share/polkit-1/rules.d/10-machines.rules <<EOF
polkit.addRule(function(action, subject) {
    if (action.id.startsWith("org.freedesktop.machine1.") ||
        ((action.id == "org.freedesktop.systemd1.manage-units" || action.id == "org.freedesktop.systemd1.manage-unit-files") && action.lookup("unit").startsWith("systemd-nspawn@"))) {
        return polkit.Result.YES;
    }
});
polkit.addRule(function(action, subject) {
    if ((action.id == "org.freedesktop.systemd1.manage-units" || action.id == "org.freedesktop.systemd1.manage-unit-files") &&
        /^systemd-nspawn\@.*\.service$/.test(action.lookup("unit"))) {
        return polkit.Result.YES;
    }
});
EOF
else
    cat > /var/lib/polkit-1/localauthority/10-vendor.d/machines.pkla <<EOF
[Machines Rules]
Identity=unix-user:*
Action=org.freedesktop.machine1.*;org.freedesktop.systemd1.manage-units;org.freedesktop.systemd1.manage-unit-files
ResultAny=yes
ResultInactive=yes
ResultActive=yes
EOF
fi