commit 0690f71ecd87e532b6ecf41fbccf0cc9428d177d parent 0493c592007de5af334142685122c8c3461d0a33 Author: Damian Myrda <damian@prime8.dev> Date: Tue, 27 Jan 2026 13:03:16 -0600 add gnome-keyring-tpm2-unlock systemd service and link it in link.sh Diffstat:
| M | link.sh | | | 2 | ++ |
| A | programs/systemd/user/gnome-keyring-tpm2-unlock.service | | | 13 | +++++++++++++ |
2 files changed, 15 insertions(+), 0 deletions(-)
diff --git a/link.sh b/link.sh @@ -57,10 +57,12 @@ link_config "$PROGRAMS_DIR/zed/keymap.jsonc" "$HOME/.var/app/dev.zed.Zed/config/ # Systemd user services link_config "$PROGRAMS_DIR/systemd/user/g14-volume-sync.service" "$CONFIG_DIR/systemd/user/g14-volume-sync.service" +link_config "$PROGRAMS_DIR/systemd/user/gnome-keyring-tpm2-unlock.service" "$CONFIG_DIR/systemd/user/gnome-keyring-tpm2-unlock.service" mkdir -p "$HOME/.local/bin" link_config "$PROGRAMS_DIR/systemd/g14-volume-sync" "$HOME/.local/bin/g14-volume-sync" chmod +x "$HOME/.local/bin/g14-volume-sync" systemctl --user daemon-reload systemctl --user enable --now g14-volume-sync.service 2>/dev/null || true +systemctl --user enable --now gnome-keyring-tpm2-unlock.service 2>/dev/null || true echo "✅ Config symlinks complete!" diff --git a/programs/systemd/user/gnome-keyring-tpm2-unlock.service b/programs/systemd/user/gnome-keyring-tpm2-unlock.service @@ -0,0 +1,13 @@ +[Unit] +Description=Unlock gnome-keyring via TPM2 +After=gnome-keyring-daemon.service +Requires=gnome-keyring-daemon.service + +[Service] +Type=oneshot +ExecStart=/bin/bash -c 'sudo -u tss /usr/bin/clevis-decrypt-tpm2 < %h/.config/gnome-keyring.tpm2 | %h/.local/gnome-keyring-unlock/unlock.py' +ExecCondition=/bin/test -f %h/.config/gnome-keyring.tpm2 +Environment=GNOME_KEYRING_CONTROL=%t/keyring + +[Install] +WantedBy=default.target