How can I use sys-gui with NetworkManager and USB applets?

jmynes · July 2, 2025, 8:57pm

I have configured sys-gui in accordance with the documentation below:

However, the sys-gui session’s power system tray applet doesn’t display the battery’s charge level:

github.com/QubesOS/qubes-issues

sys-gui users cannot see battery percentage, nor charging state

opened 10:11PM - 01 Jul 25 UTC

closed 11:16PM - 01 Jul 25 UTC

jmynes

R: duplicate P: default

### Qubes OS release Qubes OS 4.2 ### Brief summary The battery applet is mis…sing information in `sys-gui` ![Image](https://github.com/user-attachments/assets/fa4cd9da-66fc-42f6-ad09-34c8d324db59) ### Steps to reproduce 1. Set up `sys-gui`, per https://www.qubes-os.org/doc/gui-domain/#hybrid-gui-domain-sys-gui 2. Log in to `sys-gui` session 3. Observe battery icon ### Expected behavior - Battery percentage + remaining time should be visible - Charging state should be visible ### Actual behavior Battery appears to always be charging, and shows no percentage/time ### Additional information _No response_

It also has no Network Manager applet, and the USB Manager applet is not populated with any USB devices. This makes it difficult to use as a daily driver.

One approach is to shut down sys-gui, and then change the guivm for both the sys-net and sys-usb qubes:

qvm-prefs sys-net guivm sys-gui
qvm-prefs sys-usb guivm sys-gui

However, I would prefer to not then grant the sys-gui user access to both of these qubes.
I tried locking down access for sys-gui like this, but it did not work:

admin.vm.Console        *    sys-gui    sys-net    deny
admin.vm.Console        *    sys-gui    sys-usb    deny
qubes.VMRootShell       *    sys-gui    sys-net    deny
qubes.VMRootShell       *    sys-gui    sys-usb    deny
qubes.VMShell           *    sys-gui    sys-net    deny
qubes.VMShell           *    sys-gui    sys-usb    deny