-
-
Notifications
You must be signed in to change notification settings - Fork 13.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
pam: add support for pam_gnupg #97726
Conversation
Why do you need to copy the defaults to each of |
It adds the corresponding lines to
(actually, it seems on my system It absolutely needs to go into |
Hmm, I couldn't get this work for me :/. I used your configuration except the i3login stuff and manually edited my
I "enable" programs.gnupg = {
agent = {
enable = true;
enableBrowserSocket = true;
enableExtraSocket = true;
pinentryFlavor = null;
enableSSHSupport = false;
};
dirmngr.enable = true;
}; I'm using Gnome & GDM. |
Can you confirm that you have something like:
Also, have you made sure that your login password and your GPG password are the same? |
Yes.
That wasn't the case when I wrote my previous comment, but even now that it is, it's not working. What I expect to work is the
Gnome keyring is failing there is due to the fact my |
Did you also add your keygrip to |
I thought it's Here is the output of
And:
|
I chose the subkey because when I
|
Sorry, I meant Do you have You mentioned |
That's my mistake. I am using
No. Regular
Using That's as far as I can help. Sorry. |
This pull request has been mentioned on NixOS Discourse. There might be relevant details there: |
I'm just going to merge this seeing as it works for me. It faithfully implements the instructions here, and I'm not sure what more you could ask for in a NixOS module. We could always reopen this if it's not working for someone else. For what it's worth, I'm using lightDM in its default configuration. |
BTW a few days ago I noticed my gpg agent doesn't cache passwords at all, something GNome related... So probably it was my fault back then it didn't work. |
@NickHu thanks for this PR, for me works :) @doronbehar to make it work with gdm, use |
Motivation for this change
Adds support for pam-gnupg to the pam
module. This PR depends on #78143.
How I'm using this
In
configuration.nix
:(The interface for the pam module is pretty rough, but at least this PR
doesn't make things worse).
In
home.nix
:Things done
sandbox
innix.conf
on non-NixOS linux)nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
./result/bin/
)nix path-info -S
before and after)