Prevent password-based SDDM logins from creating an encrypted login keyring

This commit is contained in:
David Heinemeier Hansson
2026-02-21 15:03:16 +01:00
parent 3b2db4b98b
commit 1a743d3467
2 changed files with 15 additions and 0 deletions
+5
View File
@@ -14,5 +14,10 @@ Current=omarchy
EOF
fi
# Prevent password-based SDDM logins from creating an encrypted login keyring
# (which conflicts with the passwordless Default_keyring used for auto-unlock)
sudo sed -i '/-auth.*pam_gnome_keyring\.so/d' /etc/pam.d/sddm
sudo sed -i '/-password.*pam_gnome_keyring\.so/d' /etc/pam.d/sddm
# Don't use chrootable here as --now will cause issues for manual installs
sudo systemctl enable sddm.service
+10
View File
@@ -0,0 +1,10 @@
echo "Prevent SDDM password login from creating encrypted login keyring"
# Remove the encrypted login keyring if it exists (it conflicts with the passwordless Default_keyring)
rm -f "$HOME/.local/share/keyrings/login.keyring"
# Remove gnome-keyring auth/password lines from sddm PAM so password-based logins
# don't create an encrypted login keyring. Keep the session line to start the daemon,
# which will auto-unlock the passwordless Default_keyring.
sudo sed -i '/-auth.*pam_gnome_keyring\.so/d' /etc/pam.d/sddm
sudo sed -i '/-password.*pam_gnome_keyring\.so/d' /etc/pam.d/sddm