trcc-linux 9.7.1__tar.gz → 9.7.3__tar.gz

{trcc_linux-9.7.1 → trcc_linux-9.7.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: trcc-linux
-Version: 9.7.1
+Version: 9.7.3
 Summary: Linux implementation of Thermalright LCD Control Center
 Project-URL: Homepage, https://github.com/Lexonight1/thermalright-trcc-linux
 Project-URL: Documentation, https://github.com/Lexonight1/thermalright-trcc-linux#readme
@@ -121,7 +121,7 @@ Description-Content-Type: text/markdown
 [![Buy Me a Beer](https://img.shields.io/badge/Buy_Me_a_Beer-🍺-FF5F5F?style=flat)](https://buymeacoffee.com/Lexonight1)
 [![Ko-fi](https://img.shields.io/badge/Ko--fi-☕-FF5E5B?style=flat&logo=kofi&logoColor=white)](https://ko-fi.com/lexonight1)
 
-> Huge thanks to **[@Xentrino](https://github.com/Xentrino)**, **[@javisaman](https://github.com/javisaman)**, **[@loosethoughts19-hash](https://github.com/loosethoughts19-hash)**, **[@Reborn627](https://github.com/Reborn627)**, **[@Mr-Renegade](https://github.com/Mr-Renegade)**, **[@knappstar](https://github.com/knappstar)**, **[@woebygon](https://github.com/woebygon)**, **[@Smokemic](https://github.com/Smokemic)**, **[@chava-byte](https://github.com/chava-byte)**, **[@nihilistqueen](https://github.com/nihilistqueen)**, **[@rhuggins573-crypto](https://github.com/rhuggins573-crypto)**, **[@unfirthman](https://github.com/unfirthman)**, **Glyn**, **dugalex**, and **Dunvcpi** for the beers — you guys are legends.
+> Huge thanks to **[@Xentrino](https://github.com/Xentrino)**, **[@javisaman](https://github.com/javisaman)**, **[@loosethoughts19-hash](https://github.com/loosethoughts19-hash)**, **[@Reborn627](https://github.com/Reborn627)**, **[@Mr-Renegade](https://github.com/Mr-Renegade)**, **[@knappstar](https://github.com/knappstar)**, **[@woebygon](https://github.com/woebygon)**, **[@Smokemic](https://github.com/Smokemic)**, **[@chava-byte](https://github.com/chava-byte)**, **[@nihilistqueen](https://github.com/nihilistqueen)**, **[@rhuggins573-crypto](https://github.com/rhuggins573-crypto)**, **[@unfirthman](https://github.com/unfirthman)**, **Glyn**, **dugalex**, **Dunvcpi**, and **RichardK** for the beers — you guys are legends.
 
 Native Linux port of the Thermalright LCD Control Center (Windows TRCC 2.1.2). Control and customize the LCD displays and LED segment displays on Thermalright CPU coolers, AIO pump heads, and fan hubs — entirely from Linux.
 
@@ -175,7 +175,7 @@ sudo dnf install pipx libusb-1.0.0 sg3_utils p7zip                      # Fedora
 
 # Install trcc-linux
 pipx install trcc-linux
-trcc setup        # interactive wizard — udev rules, desktop entry
+trcc system setup        # interactive wizard — udev rules, desktop entry
 ```
 
 Then **unplug and replug the USB cable** and run `trcc gui`.
@@ -221,7 +221,7 @@ Full desktop app with theme browser, video player, overlay editor, LED control p
 ```bash
 trcc detect               # Show connected devices
 trcc send image.png       # Send image to LCD
-trcc color "#ff0000"      # Fill LCD with solid color
+trcc display color "#ff0000"      # Fill LCD with solid color
 trcc video clip.mp4       # Play video on LCD
 trcc screencast           # Live screen capture to LCD
 trcc brightness 2         # Set brightness (1=25%, 2=50%, 3=100%)
@@ -233,7 +233,7 @@ trcc led-color "#00ff00"  # Set LED color
 trcc led-mode breathing   # Set LED effect mode
 trcc report               # Generate diagnostic report
 trcc doctor               # Check system dependencies
-trcc setup                # Interactive setup wizard
+trcc system setup                # Interactive setup wizard
 trcc uninstall            # Remove TRCC completely
 ```
 

{trcc_linux-9.7.1 → trcc_linux-9.7.3}/README.md

@@ -47,7 +47,7 @@
 [![Buy Me a Beer](https://img.shields.io/badge/Buy_Me_a_Beer-🍺-FF5F5F?style=flat)](https://buymeacoffee.com/Lexonight1)
 [![Ko-fi](https://img.shields.io/badge/Ko--fi-☕-FF5E5B?style=flat&logo=kofi&logoColor=white)](https://ko-fi.com/lexonight1)
 
-> Huge thanks to **[@Xentrino](https://github.com/Xentrino)**, **[@javisaman](https://github.com/javisaman)**, **[@loosethoughts19-hash](https://github.com/loosethoughts19-hash)**, **[@Reborn627](https://github.com/Reborn627)**, **[@Mr-Renegade](https://github.com/Mr-Renegade)**, **[@knappstar](https://github.com/knappstar)**, **[@woebygon](https://github.com/woebygon)**, **[@Smokemic](https://github.com/Smokemic)**, **[@chava-byte](https://github.com/chava-byte)**, **[@nihilistqueen](https://github.com/nihilistqueen)**, **[@rhuggins573-crypto](https://github.com/rhuggins573-crypto)**, **[@unfirthman](https://github.com/unfirthman)**, **Glyn**, **dugalex**, and **Dunvcpi** for the beers — you guys are legends.
+> Huge thanks to **[@Xentrino](https://github.com/Xentrino)**, **[@javisaman](https://github.com/javisaman)**, **[@loosethoughts19-hash](https://github.com/loosethoughts19-hash)**, **[@Reborn627](https://github.com/Reborn627)**, **[@Mr-Renegade](https://github.com/Mr-Renegade)**, **[@knappstar](https://github.com/knappstar)**, **[@woebygon](https://github.com/woebygon)**, **[@Smokemic](https://github.com/Smokemic)**, **[@chava-byte](https://github.com/chava-byte)**, **[@nihilistqueen](https://github.com/nihilistqueen)**, **[@rhuggins573-crypto](https://github.com/rhuggins573-crypto)**, **[@unfirthman](https://github.com/unfirthman)**, **Glyn**, **dugalex**, **Dunvcpi**, and **RichardK** for the beers — you guys are legends.
 
 Native Linux port of the Thermalright LCD Control Center (Windows TRCC 2.1.2). Control and customize the LCD displays and LED segment displays on Thermalright CPU coolers, AIO pump heads, and fan hubs — entirely from Linux.
 
@@ -101,7 +101,7 @@ sudo dnf install pipx libusb-1.0.0 sg3_utils p7zip                      # Fedora
 
 # Install trcc-linux
 pipx install trcc-linux
-trcc setup        # interactive wizard — udev rules, desktop entry
+trcc system setup        # interactive wizard — udev rules, desktop entry
 ```
 
 Then **unplug and replug the USB cable** and run `trcc gui`.
@@ -147,7 +147,7 @@ Full desktop app with theme browser, video player, overlay editor, LED control p
 ```bash
 trcc detect               # Show connected devices
 trcc send image.png       # Send image to LCD
-trcc color "#ff0000"      # Fill LCD with solid color
+trcc display color "#ff0000"      # Fill LCD with solid color
 trcc video clip.mp4       # Play video on LCD
 trcc screencast           # Live screen capture to LCD
 trcc brightness 2         # Set brightness (1=25%, 2=50%, 3=100%)
@@ -159,7 +159,7 @@ trcc led-color "#00ff00"  # Set LED color
 trcc led-mode breathing   # Set LED effect mode
 trcc report               # Generate diagnostic report
 trcc doctor               # Check system dependencies
-trcc setup                # Interactive setup wizard
+trcc system setup                # Interactive setup wizard
 trcc uninstall            # Remove TRCC completely
 ```
 

{trcc_linux-9.7.1 → trcc_linux-9.7.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "trcc-linux"
-version = "9.7.1"
+version = "9.7.3"
 description = "Linux implementation of Thermalright LCD Control Center"
 readme = "README.md"
 license = "GPL-3.0-or-later"
@@ -136,6 +136,10 @@ artifacts = [
     "**/assets/**/*.service",
     "**/assets/**/*.policy",
     "**/assets/**/*.svg",
+    # SELinux policy source — `trcc system setup` builds + loads it on Fedora
+    # so source/pip installs can pass the USB/SCSI ioctls (packages ship the
+    # compiled .pp via the rpm).
+    "**/data/trcc_usb.te",
 ]
 
 [tool.pytest.ini_options]

{trcc_linux-9.7.1 → trcc_linux-9.7.3}/src/trcc/__version__.py

@@ -1,4 +1,4 @@
 """TRCC Linux version information. History in doc/CHANGELOG.md."""
 
-__version__ = "9.7.1"
+__version__ = "9.7.3"
 __version_info__ = tuple(int(x) for x in __version__.split("."))

trcc_linux-9.7.3/src/trcc/adapters/device/_pyusb_find.py

@@ -0,0 +1,43 @@
+"""PyUSB ``find()`` seam — uses libusb_package's bundled backend on Windows.
+
+PyUSB needs ``libusb-1.0`` userspace to talk to USB devices.  Linux/macOS/BSD
+ship it via the system package manager; **Windows has no system libusb**, so
+pip-installed *and* PyInstaller-frozen users hit
+``usb.core.NoBackendError: No backend available`` (#131, and again #187/#188 once
+the GUI launch crash was fixed and discovery actually ran).
+
+The canonical fix is `libusb-package <https://github.com/pyocd/libusb-package>`_
+(pyocd's project): a Windows wheel that bundles ``libusb-1.0.dll`` and exposes a
+``find()`` that loads that bundled DLL **explicitly by path** — not via the
+flaky ``ctypes``/PATH search that bare ``usb.core.find`` relies on.  It's a
+Windows-only dependency in ``pyproject.toml``.
+
+This module is the ONE seam every ``usb.core.find`` call goes through, so there
+is exactly one place that knows about the Windows backend quirk (the cutover
+dropped this seam and reverted every call site to bare ``usb.core.find``, which
+is what reintroduced the crash).  Importing ``libusb_package`` here is also what
+makes PyInstaller bundle the module + its DLL into the frozen Windows build.
+"""
+from __future__ import annotations
+
+import logging
+from typing import Any
+
+log = logging.getLogger(__name__)
+
+try:
+    from libusb_package import find as _find  # pyright: ignore[reportMissingImports]
+    log.debug("pyusb backend: libusb-package (bundled libusb-1.0)")
+except ImportError:
+    from usb.core import find as _find
+    log.debug("pyusb backend: system libusb via usb.core.find")
+
+
+def find(*args: Any, **kwargs: Any) -> Any:
+    """Drop-in for ``usb.core.find()`` with a Windows-compatible backend.
+
+    Identical signature + return type.  Routes through ``libusb_package.find``
+    where it's installed (Windows, via the bundled DLL) and falls back to
+    ``usb.core.find`` everywhere else (Linux/macOS/BSD system libusb).
+    """
+    return _find(*args, **kwargs)

{trcc_linux-9.7.1 → trcc_linux-9.7.3}/src/trcc/adapters/device/transport.py

@@ -19,6 +19,7 @@ import usb.util
 
 from ...core.errors import PermissionError_, TransportError
 from ...core.ports import BulkTransport
+from ._pyusb_find import find as usb_find
 
 # Optional hidapi backend (the [hid] extra)
 try:
@@ -79,7 +80,7 @@ class PyUsbBulkTransport(BulkTransport):
         if self._serial:
             kwargs['serial_number'] = self._serial
 
-        self._device = usb.core.find(**kwargs)
+        self._device = usb_find(**kwargs)
         if self._device is None:
             log.error("USB device %04X:%04X not found", self._vid, self._pid)
             return False
@@ -203,7 +204,7 @@ class PyUsbBulkTransport(BulkTransport):
         }
         if self._serial:
             kwargs['serial_number'] = self._serial
-        new_device = usb.core.find(**kwargs)
+        new_device = usb_find(**kwargs)
         if new_device is None:
             raise TransportError(
                 f"USB device {self._vid:04X}:{self._pid:04X} disappeared "

trcc_linux-9.7.3/src/trcc/adapters/system/_elevate.py

@@ -0,0 +1,48 @@
+"""Re-exec a setup snippet as root via sudo, with ``trcc`` importable.
+
+``pip install --user`` puts ``trcc`` in the *user's* site-packages, which
+root's interpreter doesn't see — so a bare ``sudo python -c "import trcc"``
+dies with ``ModuleNotFoundError`` (the failure seen running ``trcc system
+setup`` after a ``--user`` install).  We inject every site-packages dir + the
+``trcc`` package root onto ``sys.path`` *inside* the ``-c`` snippet, so the
+elevated interpreter imports ``trcc`` regardless of how it was installed
+(``--user`` / venv / system / source checkout).  Injecting the path in-process
+is more robust than a ``PYTHONPATH=`` env var, which sudo's ``env_reset`` /
+``secure_path`` can strip.  (Same shape as legacy ``linux_platform.sudo_reexec``.)
+"""
+from __future__ import annotations
+
+import logging
+import site
+import subprocess
+import sys
+from pathlib import Path
+
+log = logging.getLogger(__name__)
+
+
+def _import_paths() -> list[str]:
+    """Every dir ``trcc`` might be importable from, for the root re-exec."""
+    paths: list[str] = list(site.getsitepackages())
+    paths.append(site.getusersitepackages())
+    # .../trcc/adapters/system/_elevate.py → parents[3] holds the `trcc` package
+    # (the site-packages dir, or `src/` in a source checkout).
+    paths.append(str(Path(__file__).resolve().parents[3]))
+    return paths
+
+
+def reexec_as_root(snippet: str) -> int:
+    """Run ``snippet`` (a ``python -c`` body) as root via sudo, ``trcc`` on path.
+
+    ``snippet`` may reference ``sys`` (already imported).  Returns the child's
+    exit code, or 1 if sudo couldn't be spawned.
+    """
+    paths = _import_paths()
+    code = f"import sys; sys.path[:0] = {paths!r}; {snippet}"
+    log.info("reexec_as_root: re-running as root via sudo")
+    try:
+        result = subprocess.run(["sudo", sys.executable, "-c", code], check=False)
+    except (OSError, subprocess.SubprocessError):
+        log.exception("reexec_as_root: sudo re-exec failed")
+        return 1
+    return result.returncode

trcc_linux-9.7.3/src/trcc/adapters/system/_selinux.py

@@ -0,0 +1,107 @@
+"""SELinux policy install — load the ``trcc_usb`` module so the bulk/SCSI USB
+ioctls aren't blocked on enforcing systems.
+
+RPM packages compile + load this in their ``%post`` (the compiled ``.pp`` is
+shipped).  This module is the source/pip path that ``trcc system setup`` runs —
+it builds the module from the bundled ``trcc_usb.te`` (needs ``checkpolicy``) and
+loads it with ``semodule``.  It's a NO-OP off SELinux, and mirrors
+``_udev.install``'s root re-exec (needs root → re-runs itself via ``sudo``).
+"""
+from __future__ import annotations
+
+import logging
+import os
+import shutil
+import subprocess
+import tempfile
+from importlib.resources import files
+from pathlib import Path
+
+from ._elevate import reexec_as_root
+
+log = logging.getLogger(__name__)
+
+_MODULE = "trcc_usb"
+# ``/sys/fs/selinux`` is mounted only when SELinux is present on the system.
+_SELINUX_FS = Path("/sys/fs/selinux")
+
+
+def _selinux_active() -> bool:
+    """True only on a system actually running SELinux (rules would matter)."""
+    return _SELINUX_FS.is_dir() and shutil.which("semodule") is not None
+
+
+def _already_loaded() -> bool:
+    try:
+        out = subprocess.run(
+            ["semodule", "-l"], capture_output=True, text=True,
+            timeout=30, check=False,
+        )
+    except (OSError, subprocess.SubprocessError):
+        return False
+    return _MODULE in out.stdout.split()
+
+
+def install(dry_run: bool = False) -> int:
+    """Build + load the ``trcc_usb`` SELinux module.  Returns 0 on success or
+    no-op, non-zero on a real failure.  Requires root; re-execs via sudo when
+    not root.  No-op off SELinux."""
+    log.info("selinux.install: dry_run=%s", dry_run)
+    if not _selinux_active():
+        log.info("selinux.install: SELinux not active (no /sys/fs/selinux or "
+                 "semodule) — skipping")
+        return 0
+    if _already_loaded():
+        log.info("selinux.install: %s already loaded — nothing to do", _MODULE)
+        return 0
+
+    te = files("trcc.data") / "trcc_usb.te"
+    if not te.is_file():
+        log.warning("selinux.install: trcc/data/trcc_usb.te not bundled — "
+                    "cannot build the policy (install the trcc-linux RPM, which "
+                    "ships the compiled module)")
+        return 0
+
+    if dry_run:
+        print(f"--- would build + load SELinux module '{_MODULE}' "
+              "from trcc_usb.te ---")
+        return 0
+
+    if os.geteuid() != 0:
+        return reexec_as_root(
+            "from trcc.adapters.system._selinux import install; sys.exit(install())"
+        )
+
+    if not (shutil.which("checkmodule") and shutil.which("semodule_package")):
+        log.warning("selinux.install: checkpolicy/policycoreutils not installed "
+                    "— cannot build the SELinux module.  Install them (e.g. "
+                    "'dnf install checkpolicy policycoreutils'), or use the "
+                    "trcc-linux RPM (loads it automatically).")
+        return 1
+
+    te_bytes = te.read_bytes()
+    with tempfile.TemporaryDirectory() as d:
+        dp = Path(d)
+        (dp / "trcc_usb.te").write_bytes(te_bytes)
+        try:
+            subprocess.run(
+                ["checkmodule", "-M", "-m", "-o",
+                 str(dp / "trcc_usb.mod"), str(dp / "trcc_usb.te")],
+                check=True,
+            )
+            subprocess.run(
+                ["semodule_package", "-o",
+                 str(dp / "trcc_usb.pp"), "-m", str(dp / "trcc_usb.mod")],
+                check=True,
+            )
+            subprocess.run(
+                ["semodule", "-i", str(dp / "trcc_usb.pp")], check=True,
+            )
+        except (OSError, subprocess.SubprocessError):
+            log.exception("selinux.install: failed to build/load %s", _MODULE)
+            return 1
+
+    log.info("selinux.install: loaded the %s SELinux module", _MODULE)
+    return 0
+
+

{trcc_linux-9.7.1 → trcc_linux-9.7.3}/src/trcc/adapters/system/_udev.py

@@ -30,11 +30,11 @@ from __future__ import annotations
 import logging
 import os
 import subprocess
-import sys
 from pathlib import Path
 
 from ...core.models import Wire
 from ...core.registry import ALL_DEVICES
+from ._elevate import reexec_as_root
 
 log = logging.getLogger(__name__)
 
@@ -131,7 +131,9 @@ def install(dry_run: bool = False) -> int:
         return 0
 
     if os.geteuid() != 0:
-        return _sudo_reexec()
+        return reexec_as_root(
+            "from trcc.adapters.system._udev import install; sys.exit(install())"
+        )
 
     try:
         _write_atomic(_RULES_PATH, rules)
@@ -175,22 +177,3 @@ def _reload_udev() -> int:
     return 0
 
 
-def _sudo_reexec() -> int:
-    """Re-run ourselves as root via sudo to install the rules.
-
-    The command string is a `python -c` to avoid relying on a console
-    script being on root's PATH.
-    """
-    log.info("_sudo_reexec: called")
-    code = (
-        "from trcc.adapters.system._udev import install; "
-        "import sys; sys.exit(install())"
-    )
-    cmd: list[str] = ["sudo", sys.executable, "-c", code]
-    log.info("Re-running as root via sudo to install udev rules")
-    try:
-        result = subprocess.run(cmd, check=False)
-    except (OSError, subprocess.SubprocessError):
-        log.exception("sudo re-exec failed")
-        return 1
-    return result.returncode

{trcc_linux-9.7.1 → trcc_linux-9.7.3}/src/trcc/adapters/system/_winusb.py

@@ -123,13 +123,13 @@ def _classify_devices() -> tuple[
     driver.  We can't tell the two apart without enumerating Windows'
     own driver tree, so the instructions cover both cases.
     """
-    import usb.core
+    from ..device._pyusb_find import find as usb_find
 
     visible: list[tuple[int, int, str]] = []
     invisible: list[tuple[int, int, str]] = []
     for (vid, pid), product in sorted(ALL_DEVICES.items()):
         label = f"{product.vendor} {product.product}"
-        if any(usb.core.find(find_all=True, idVendor=vid, idProduct=pid) or []):
+        if any(usb_find(find_all=True, idVendor=vid, idProduct=pid) or []):
             visible.append((vid, pid, label))
         else:
             invisible.append((vid, pid, label))

{trcc_linux-9.7.1 → trcc_linux-9.7.3}/src/trcc/adapters/system/bsd.py

@@ -14,7 +14,6 @@ from collections.abc import Callable
 from pathlib import Path
 
 import psutil  # pyright: ignore[reportMissingImports]
-import usb.core
 import usb.util
 
 from ...core.models import DeviceInfo
@@ -28,6 +27,7 @@ from ...core.ports import (
     SensorEnumerator,
 )
 from ...core.registry import ALL_DEVICES
+from ..device._pyusb_find import find as usb_find
 from ..device.transport import PyUsbBulkTransport
 from ..device.usb_bot_scsi import UsbBotScsiTransport
 from . import PlatformFactory
@@ -89,7 +89,7 @@ class BSDPlatform(Platform):
                  len(ALL_DEVICES))
         found: list[DeviceInfo] = []
         for (vid, pid) in ALL_DEVICES:
-            for dev in (usb.core.find(find_all=True, idVendor=vid, idProduct=pid) or []):
+            for dev in (usb_find(find_all=True, idVendor=vid, idProduct=pid) or []):
                 serial_idx = getattr(dev, "iSerialNumber", 0)
                 serial = ""
                 try:

{trcc_linux-9.7.1 → trcc_linux-9.7.3}/src/trcc/adapters/system/linux.py

@@ -17,7 +17,6 @@ import logging
 import os
 from pathlib import Path
 
-import usb.core
 import usb.util
 
 from ...core.errors import TransportError
@@ -32,6 +31,7 @@ from ...core.ports import (
     SensorEnumerator,
 )
 from ...core.registry import ALL_DEVICES
+from ..device._pyusb_find import find as usb_find
 from ..device.transport import PyUsbBulkTransport
 from ..sensors.aggregator import build_linux_sensors
 from ..sensors.gpu_detect import (
@@ -39,6 +39,7 @@ from ..sensors.gpu_detect import (
     install_matching_gpu_extras,
 )
 from . import PlatformFactory
+from ._selinux import install as install_selinux_policy
 from ._udev import install as install_udev_rules
 
 log = logging.getLogger(__name__)
@@ -458,7 +459,7 @@ class LinuxPlatform(Platform):
                  len(ALL_DEVICES))
         found: list[DeviceInfo] = []
         for (vid, pid) in ALL_DEVICES:
-            for dev in (usb.core.find(find_all=True, idVendor=vid, idProduct=pid) or []):
+            for dev in (usb_find(find_all=True, idVendor=vid, idProduct=pid) or []):
                 serial_idx = getattr(dev, 'iSerialNumber', 0)
                 serial: str = ""
                 try:
@@ -509,12 +510,15 @@ class LinuxPlatform(Platform):
     def setup(self, interactive: bool = True) -> int:
         """Run one-time Linux setup.
 
-        Two things happen here and neither can silently no-op:
+        Three things happen here and none can silently no-op:
           1. udev rules — write /etc/udev/rules.d/99-trcc-lcd.rules for
              every device in the registry + modprobe quirks + sg autoload.
              Requires root; re-execs via sudo when not already root.
           2. GPU Python extras — detect GPU vendors via PCI sysfs and
              pip install matching libs (e.g., nvidia-ml-py for NVIDIA).
+          3. SELinux policy — on enforcing systems, build + load the
+             ``trcc_usb`` module so the bulk/SCSI USB ioctls aren't blocked.
+             No-op off SELinux.  (RPM installs already load it in %post.)
 
         Non-interactive mode prints what would be done and returns 0
         without touching the system.
@@ -526,13 +530,15 @@ class LinuxPlatform(Platform):
             vendors = detect_gpu_vendors()
             log.info("Detected GPU vendors: %s", sorted(vendors) or "none")
             install_matching_gpu_extras(vendors, dry_run=True)
+            install_selinux_policy(dry_run=True)
             return 0
 
         rc_udev = install_udev_rules(dry_run=False)
         vendors = detect_gpu_vendors()
         log.info("Detected GPU vendors: %s", sorted(vendors) or "none")
         rc_gpu = install_matching_gpu_extras(vendors, dry_run=False)
-        return rc_udev or rc_gpu
+        rc_selinux = install_selinux_policy(dry_run=False)
+        return rc_udev or rc_gpu or rc_selinux
 
     def check_permissions(self) -> list[str]:
         """Return user-facing warnings if udev rules are missing, etc."""

{trcc_linux-9.7.1 → trcc_linux-9.7.3}/src/trcc/adapters/system/macos.py

@@ -17,7 +17,6 @@ from collections.abc import Callable
 from pathlib import Path
 
 import psutil  # pyright: ignore[reportMissingImports]
-import usb.core
 import usb.util
 
 from ...core.models import DeviceInfo
@@ -31,6 +30,7 @@ from ...core.ports import (
     SensorEnumerator,
 )
 from ...core.registry import ALL_DEVICES
+from ..device._pyusb_find import find as usb_find
 from ..device.transport import PyUsbBulkTransport
 from ..device.usb_bot_scsi import UsbBotScsiTransport
 from . import PlatformFactory
@@ -93,7 +93,7 @@ class MacOSPlatform(Platform):
                  len(ALL_DEVICES))
         found: list[DeviceInfo] = []
         for (vid, pid) in ALL_DEVICES:
-            for dev in (usb.core.find(find_all=True, idVendor=vid, idProduct=pid) or []):
+            for dev in (usb_find(find_all=True, idVendor=vid, idProduct=pid) or []):
                 serial_idx = getattr(dev, "iSerialNumber", 0)
                 serial = ""
                 try:

{trcc_linux-9.7.1 → trcc_linux-9.7.3}/src/trcc/adapters/system/windows.py

@@ -17,7 +17,6 @@ from contextlib import AbstractContextManager
 from pathlib import Path
 from typing import Any
 
-import usb.core
 import usb.util
 
 from ...core.errors import TransportError
@@ -32,6 +31,7 @@ from ...core.ports import (
     SensorEnumerator,
 )
 from ...core.registry import ALL_DEVICES
+from ..device._pyusb_find import find as usb_find
 from ..device.transport import PyUsbBulkTransport
 from ..sensors.windows import build_windows_sensors
 from . import PlatformFactory
@@ -359,7 +359,7 @@ class WindowsPlatform(Platform):
                  len(ALL_DEVICES))
         found: list[DeviceInfo] = []
         for (vid, pid) in ALL_DEVICES:
-            for dev in (usb.core.find(find_all=True, idVendor=vid, idProduct=pid) or []):
+            for dev in (usb_find(find_all=True, idVendor=vid, idProduct=pid) or []):
                 serial_idx = getattr(dev, "iSerialNumber", 0)
                 serial = ""
                 try:

{trcc_linux-9.7.1 → trcc_linux-9.7.3}/src/trcc/app.py

@@ -207,6 +207,12 @@ class App:
         # whether to ``start_hotplug``.  In-process CLI scripts that
         # only do one Command don't need it; the daemon and GUI do.
         self._hotplug_started = False
+        # Seed the persisted GPU choice into the (singleton) enumerator so a
+        # restart / CLI / API / daemon honours it, not just an in-session GUI
+        # click — the composition root applies persisted state to the port.
+        # Guarded so the common no-preference case never force-builds sensors.
+        if self.settings.app.active_gpu:
+            self.platform.sensors().set_preferred_gpu(self.settings.app.active_gpu)
 
     def _persist_user_mask_dc(self, event: Any) -> None:
         """On any overlay-metric edit (``OverlayChanged``), rewrite an active

{trcc_linux-9.7.1 → trcc_linux-9.7.3}/src/trcc/core/commands/system.py

@@ -383,8 +383,13 @@ class RunSetup(Command[SetupResult]):
     interactive: bool = True
 
     def execute(self, app: App) -> SetupResult:
-        warnings = app.platform.check_permissions()
+        # Check permissions AFTER setup so the warnings reflect what setup just
+        # installed — not the pre-install state.  Snapshotting before setup
+        # made a first run report "udev rules not installed" right next to
+        # "exit code 0" (legacy's run_setup checks-then-installs, never reports
+        # a pre-install warning as a result).
         code = app.platform.setup(interactive=self.interactive)
+        warnings = app.platform.check_permissions()
         return SetupResult(
             ok=code == 0,
             message=f"Setup completed with exit code {code}",
@@ -989,6 +994,10 @@ class SetGpuDevice(Command[GpuDeviceResult]):
     def execute(self, app: App) -> GpuDeviceResult:
         normalized: str | None = self.gpu_key.strip() or None
         app.settings.set_active_gpu(normalized)
+        # Push the choice into the live (singleton) enumerator so the metric
+        # actually re-routes — the universal hop every UI shares.  Without
+        # this the selection only persisted and primary_gpu() ignored it.
+        app.platform.sensors().set_preferred_gpu(normalized)
         app.events.publish(GpuDeviceChanged(gpu_key=normalized))
         return GpuDeviceResult(
             ok=True, gpu_key=normalized,

{trcc_linux-9.7.1 → trcc_linux-9.7.3}/src/trcc/core/ports.py

@@ -387,6 +387,12 @@ class SensorEnumerator(ABC):
     dict view for overlays keyed by normalized names.
     """
 
+    # User's GPU choice (sensor key, e.g. 'nvidia:0'); ``None`` = auto-pick.
+    # Set by ``SetGpuDevice`` and seeded at boot by the App composition root
+    # from ``settings.active_gpu`` — the universal path every UI shares, so the
+    # selected GPU drives the metric regardless of which UI made the choice.
+    _preferred_gpu_key: str | None = None
+
     # ── Structured access ───────────────────────────────────────────
     @abstractmethod
     def cpu(self) -> CpuSource: ...
@@ -402,9 +408,23 @@ class SensorEnumerator(ABC):
     def fans(self) -> list[FanSource]:
         """All detected fans.  Empty if none."""
 
+    def set_preferred_gpu(self, gpu_key: str | None) -> None:
+        """Pin which GPU ``primary_gpu()`` returns (``''``/``None`` = auto)."""
+        normalized = gpu_key or None
+        log.info("set_preferred_gpu: %s -> %s",
+                 self._preferred_gpu_key, normalized)
+        self._preferred_gpu_key = normalized
+
     def primary_gpu(self) -> GpuSource | None:
-        """First discrete GPU, else first integrated, else None."""
+        """The user-preferred GPU if one is set and still present, else the
+        first discrete GPU, else first integrated, else None."""
         gpus = self.gpus()
+        if self._preferred_gpu_key is not None:
+            for gpu in gpus:
+                if gpu.key == self._preferred_gpu_key:
+                    return gpu
+            log.warning("primary_gpu: preferred %s not among %s — auto-picking",
+                        self._preferred_gpu_key, [g.key for g in gpus])
         for gpu in gpus:
             if gpu.is_discrete:
                 return gpu

{trcc_linux-9.7.1 → trcc_linux-9.7.3}/src/trcc/ipc.py

@@ -342,7 +342,13 @@ class IPCServer:
         """Bind + listen.  Caller is responsible for serving (see ``serve_forever``)."""
         log.info("start: called")
         if not hasattr(socket, "AF_UNIX"):
-            raise RuntimeError("AF_UNIX not available — daemon mode requires Unix")
+            # Windows has no AF_UNIX — the GUI/daemon simply runs in-process,
+            # hosting no socket.  Legacy degraded here; the cutover changed this
+            # to `raise`, which crashed the Windows GUI on launch (#187 follow-on,
+            # surfaced once the libusb fix let the GUI boot far enough to reach it).
+            log.info("start: AF_UNIX unavailable (Windows) — IPC server skipped; "
+                     "running in-process")
+            return
         path = socket_path()
         path.parent.mkdir(parents=True, exist_ok=True)
         if path.exists():