login greeter
git clone https://git.lucas.co/cce-display-manager.git
systemd/gnome-keyring-daemon.service.d/tpm-unlock.conf (663B)
1 # Start the keyring already unlocked, as a single process. See
2 # cce-gnome-keyring-start for why the stock two-step (start locked, then
3 # `--unlock`) is wrong here: the second command daemonizes.
4 [Service]
5 ExecStart=
6 ExecStart=/home/lsgalante/.local/bin/cce-gnome-keyring-start
7
8 # NEVER restart-loop. The stock unit sets Restart=on-failure; combined with a
9 # credential this service could not decrypt at login, that produced 99 restarts
10 # in ~90s, spawning a transient systemd-creds@ unit each time, and wedged the
11 # login on vt1 (2026-08-29). A keyring that fails to start must fail QUIETLY:
12 # losing secrets is recoverable, an unusable login is not.
13 Restart=no