ollama - 💡(How to fix) Fix More transparent permission flow for CLI installation on macOS using desktop app [1 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
ollama/ollama#15604Fetched 2026-04-17 08:23:21
View on GitHub
Comments
0
Participants
1
Timeline
1
Reactions
0
Participants
Timeline (top)
labeled ×1

Code Example

Title:
  Install Command Line Tool
  
  Body:
  Ollama can install a command line tool so you can run `ollama` from Terminal.
  
  This will create a symlink:
    /usr/local/bin/ollama → /Applications/Ollama.app/Contents/Resources/ollama
  
  Administrator permission is required to write to /usr/local/bin.
  
  Buttons:
   [Not Now] [Create Symlink]
RAW_BUFFERClick to expand / collapse

The issue On first launch, the macOS app immediately triggers a system authentication prompt to install the ollama CLI. This happens without any prior explanation from the app itself.

From a user perspective (even a technical one), this feels abrupt: • The system dialog appears with no context • It’s not clear what is being installed • It’s not clear where it’s being installed • It’s not obvious that this is just creating a symlink

While this is explained in the documentation, not everyone reads the documentation.

Even though the behavior is safe and minimal, the lack of disclosure creates unnecessary friction and distrust.

Expected behavior (macOS conventions) Apps that require elevated permissions—especially for system-level locations like /usr/local/bin—typically: • Explain the action before triggering the system auth dialog • Clearly state what will be installed and why • Give the user a chance to opt in intentionally

Many developer tools also make this step explicit and user-driven, rather than automatic on first launch.

Suggested improvement A simple pre-permission dialog on first launch would solve this cleanly.

Proposed dialog: • Short explanation in plain, developer-friendly terms: • That Ollama wants to create a symlink • The source and destination paths • Why this enables using ollama from Terminal • Why admin permission is required (writing to /usr/local/bin)

Actions: • Create Symlink (default) • Not Now

Example dialog text and layout:

  Title:
  Install Command Line Tool
  
  Body:
  Ollama can install a command line tool so you can run `ollama` from Terminal.
  
  This will create a symlink:
    /usr/local/bin/ollama → /Applications/Ollama.app/Contents/Resources/ollama
  
  Administrator permission is required to write to /usr/local/bin.
  
  Buttons:
   [Not Now] [Create Symlink]

This preserves the current behavior while making it explicit and intentional.

Settings fallback Additionally, it would be useful to expose this in a Settings pane: • Show whether the CLI symlink is currently installed • Provide a “Create CLI Symlink” button if it is missing

This helps in cases where: • The user initially chose “Not Now” • The symlink was manually removed later • The user simply wants a clear, discoverable way to enable it

extent analysis

TL;DR

Implement a pre-permission dialog on first launch to explain the creation of a symlink for the ollama CLI and obtain user consent before triggering the system authentication prompt.

Guidance

  • Display a clear explanation of the action, including the source and destination paths of the symlink, and the reason for requiring admin permission.
  • Provide a "Create Symlink" button as the default action and a "Not Now" option to allow users to opt-in intentionally.
  • Consider adding a Settings pane to expose the current state of the CLI symlink and offer a "Create CLI Symlink" button if it is missing.
  • Ensure the dialog text and layout are plain, developer-friendly, and follow macOS conventions for requesting elevated permissions.

Example

Dialog text and layout:
### Install Command Line Tool
Ollama can install a command line tool so you can run `ollama` from Terminal.
This will create a symlink:
  /usr/local/bin/ollama → /Applications/Ollama.app/Contents/Resources/ollama
Administrator permission is required to write to /usr/local/bin.
[Not Now] [Create Symlink]

Notes

This solution assumes that the current behavior of creating a symlink is safe and minimal, but the lack of disclosure is causing unnecessary friction and distrust. The proposed dialog and Settings pane are intended to make the process explicit and intentional, while preserving the current behavior.

Recommendation

Apply the proposed workaround by implementing a pre-permission dialog on first launch, as it provides a clear and intentional way to obtain user consent and explain the creation of the symlink.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING