1
1
Fork 0

pam: work around keyring not unlocking with fingerprint login

Signed-off-by: Myned <dev@bjork.tech>
This commit is contained in:
Myned 2024-09-28 12:44:57 -05:00
parent a6e13a1253
commit 71efe79cb2
Signed by: myned
GPG key ID: C7224454F7881A34
3 changed files with 6 additions and 6 deletions

View file

@ -10,6 +10,5 @@ in {
config = mkIf cfg.enable { config = mkIf cfg.enable {
programs.seahorse.enable = true; programs.seahorse.enable = true;
services.gnome.gnome-keyring.enable = true;
}; };
} }

View file

@ -8,9 +8,10 @@ with lib; let
in { in {
options.custom.services.gnome-keyring.enable = mkOption {default = false;}; options.custom.services.gnome-keyring.enable = mkOption {default = false;};
config.home-manager.users.${config.custom.username} = mkIf cfg.enable { config = mkIf cfg.enable {
# https://wiki.archlinux.org/title/GNOME/Keyring # https://wiki.archlinux.org/title/GNOME/Keyring
# https://gitlab.gnome.org/GNOME/gnome-keyring # https://gitlab.gnome.org/GNOME/gnome-keyring
services.gnome-keyring.enable = true; services.gnome.gnome-keyring.enable = true;
home-manager.users.${config.custom.username}.services.gnome-keyring.enable = true;
}; };
} }

View file

@ -33,6 +33,9 @@ in {
}; };
}; };
# Use password at login to unlock keyring
security.pam.services.greetd.fprintAuth = false;
# Attempt to prevent bootlogs from polluting the tty # Attempt to prevent bootlogs from polluting the tty
# https://github.com/apognu/tuigreet/issues/68 # https://github.com/apognu/tuigreet/issues/68
systemd.services.greetd.serviceConfig = { systemd.services.greetd.serviceConfig = {
@ -44,8 +47,5 @@ in {
TTYVHangup = true; TTYVHangup = true;
TTYVTDisallocate = true; TTYVTDisallocate = true;
}; };
# FIXME: Does not unlock at login
security.pam.services.greetd.enableGnomeKeyring = true; # Allow PAM unlocking
}; };
} }