The Packagekit polkit policy is completely desktop-centric and expects that the user (admin or not) is logged in an active local session (ie: a seat in logind parlance, with a monitor and keyboard). This prevents use of PackageKit when logged in via ssh (and using pkttyagent as your polkit agent) or via Cockpit. The <allow_any> tag in polkit policy applies to non-local sessions. It should be set to something other than 'no' unless the action directly affects hardware of the login seat. The attached patch fixes this issue.
Created attachment 98447 [details] [review] policy: Make the polkit policy not be desktop-centric The polkit policy should allow admin users logged in via ssh or Cockpit (for example on a server) to perform the actions in question. The <allow_any> applies non local sessions.
Pushed to master, thanks.
Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.