ZacharyZhang-NY/omarchycn
4
5
Fork 0
Code Issues Pull Requests 2 Actions Packages Projects Releases 5 Wiki Activity

Prevent password-based SDDM logins from creating an encrypted login keyring

Browse Source
This commit is contained in:
David Heinemeier Hansson
2026-02-21 15:03:16 +01:00
parent 3b2db4b98b
commit 1a743d3467
2 changed files with 15 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
install/login/sddm.sh
+5
View File
@@ -14,5 +14,10 @@ Current=omarchy
EOF EOF
fi fi
# Prevent password-based SDDM logins from creating an encrypted login keyring
# (which conflicts with the passwordless Default_keyring used for auto-unlock)
sudo sed -i '/-auth.*pam_gnome_keyring\.so/d' /etc/pam.d/sddm
sudo sed -i '/-password.*pam_gnome_keyring\.so/d' /etc/pam.d/sddm
# Don't use chrootable here as --now will cause issues for manual installs # Don't use chrootable here as --now will cause issues for manual installs
sudo systemctl enable sddm.service sudo systemctl enable sddm.service
migrations/1771682500.sh
+10
View File
@@ -0,0 +1,10 @@
echo "Prevent SDDM password login from creating encrypted login keyring"
# Remove the encrypted login keyring if it exists (it conflicts with the passwordless Default_keyring)
rm -f "$HOME/.local/share/keyrings/login.keyring"
# Remove gnome-keyring auth/password lines from sddm PAM so password-based logins
# don't create an encrypted login keyring. Keep the session line to start the daemon,
# which will auto-unlock the passwordless Default_keyring.
sudo sed -i '/-auth.*pam_gnome_keyring\.so/d' /etc/pam.d/sddm
sudo sed -i '/-password.*pam_gnome_keyring\.so/d' /etc/pam.d/sddm