How to make macOS RustDesk client starts at boot (on login screen)?

[C-Duv]

I am trying to deploy RustDesk remotely, using SSH (on multiple computers) and the goal is to allow remote access event when no one is physically present in front of the computer.

I managed to install it (using the .dmg, /usr/bin/hdiutil attach and copying to /Applications) and define macOS's privacy settings.

I created the /Library/LaunchDaemons/com.carriez.RustDesk_service.plist and /Library/LaunchAgents/com.carriez.RustDesk_server.plist files following src/platform/privileges_scripts/install.scpt.

But, after a reboot (to check if everything starts smoothly and unattended) I:

• do have /Applications/RustDesk.app/Contents/MacOS/RustDesk --server running as root user (checked using SSH, without any user physically logged in)
• cant get the session ID using /Applications/RustDesk.app/Contents/MacOS/RustDesk --get-id
• cannot connect to RustDesk session from another computer.

If I run launchctl load -w /Library/LaunchDaemons/com.carriez.RustDesk_service.plist I have more process (according to ps aux | grep -i MacOS/RustDesk) but same issue (not able to connect):

root  217  […]  2:33PM  0:03.09 /Applications/RustDesk.app/Contents/MacOS/RustDesk --server
root  537  […]  2:40PM  0:00.01 /bin/sh -c sleep 1.5; /Applications/RustDesk.app/Contents/MacOS/RustDesk --service
root  539  […]  2:40PM  0:01.01 /Applications/RustDesk.app/Contents/MacOS/RustDesk --service

I tried with both versions v1.2.3-2 and nightly (65f7541ec76): same issue.

Any idea?

macOS version is 13.5 ("Ventura")

[rustdesk]

The main problem is macOS does not allow to grant “Screen Recording" permission from command line.
https://rustdesk.com/docs/en/client/mac/

[C-Duv]

I'll compile my tccutil commands and post them here.

If I read you well, a "normal" install (manually, under user foo for example) should enable itself to start on machine boot and allow remote connection without any user logged-in physically?

[C-Duv]

Here are my tccutil commands.

They insert a rule for RustDesk Client and then enable them (=allow) in various privacy services.

bundleId='com.carriez.rustdesk'

sudo tccutil --service kTCCServiceSystemPolicyAllFiles --insert "${bundleId}"
sudo tccutil --service kTCCServiceSystemPolicyAllFiles --enable "${bundleId}"

sudo tccutil --service kTCCServiceScreenCapture --insert "${bundleId}"
sudo tccutil --service kTCCServiceScreenCapture --enable "${bundleId}"

sudo tccutil --service kTCCServiceListenEvent --insert "${bundleId}"
sudo tccutil --service kTCCServiceListenEvent --enable "${bundleId}"

sudo tccutil --service kTCCServiceAccessibility --insert "${bundleId}"
sudo tccutil --service kTCCServiceAccessibility --enable "${bundleId}"

Note: Requires tccutil at commit 512b611 (or later) which includes two required fixes:

• Fix for the « Attempting to write a readonly database. You probably need to disable SIP. » error message.
• Use auth_value=2 when enabling service (needed by macOS 12+) (issue #61).

[rustdesk]

Thanks, i will test boot later.

[C-Duv]

By looking for a workaround, I noticed RustDesk can accept incoming connection on the "locked screen" if it was initially started by an user which locked it's computer (does not matter if someone connected to the computer between RustDesk startup and macOS lock).

So, on computer C1:

• Start computer
• Log-in physically using user U1
• Launch RustDesk from GUI
• Lock the computer session (Apple menu > Lock Screen)

Then, on computer C2: you can RustDesk-connect to computer C1, the screen will display macOS's lock screen and you'll be able to type the U1's password and access it's macOS desktop/session.

But you can't log-in with another user account (say U2) than U1 (the one that initially started RustDesk), well you can but you'll see U1 desktop and won't be able to interact with it.
The physical screen of C1 will display U2's macOS desktop/session.

[C-Duv]

I looked at AnyDesk, it works flawlessly on log-in screen and the only running process (at boot) is /Applications/AnyDesk.app/Contents/MacOS/AnyDesk --service (under root user).

I did the same, executed /Applications/RustDesk.app/Contents/MacOS/RustDesk --service as root and I got the following output and no return to shell (process continuously running):

2024-04-23 18:53:06.664 RustDesk[419:3760] XType: Using static font registry.

But: no sign-in on the RustDesk Server, no connection possible, and lsof -i -P | grep LISTEN shows no RustDesk opened port