From a0441aca1607a685bcbe77ce7b3ac6d24d3e00da Mon Sep 17 00:00:00 2001
From: ManInDark <61268856+ManInDark@users.noreply.github.com>
Date: Thu, 8 Jan 2026 17:43:40 +0100
Subject: [PATCH] fix: automatically unlock gnome keyring on login

---
 build_files/03_post_desktop.sh |  2 ++
 build_files/login              | 18 ++++++++++++++++++
 2 files changed, 20 insertions(+)
 create mode 100644 build_files/login

diff --git a/build_files/03_post_desktop.sh b/build_files/03_post_desktop.sh
index 7ee58db..397f452 100755
--- a/build_files/03_post_desktop.sh
+++ b/build_files/03_post_desktop.sh
@@ -46,3 +46,5 @@ dnf5 install -y https://launchpad.net/veracrypt/trunk/1.26.24/+download/veracryp
 
 dnf5 remove  -y rpmfusion-free-release rpmfusion-nonfree-release
 dnf5 clean all
+
+cp /ctx/login /etc/pam.d
diff --git a/build_files/login b/build_files/login
new file mode 100644
index 0000000..3e790b3
--- /dev/null
+++ b/build_files/login
@@ -0,0 +1,18 @@
+#%PAM-1.0
+auth       substack     system-auth
+auth       include      postlogin
+auth       optional	pam_gnome_keyring.so
+account    required     pam_nologin.so
+account    include      system-auth
+password   include      system-auth
+# pam_selinux.so close should be the first session rule
+session    required     pam_selinux.so close
+session    required     pam_loginuid.so
+# pam_selinux.so open should only be followed by sessions to be executed in the user context
+session    required     pam_selinux.so open
+session    required     pam_namespace.so
+session    optional     pam_keyinit.so force revoke
+session    include      system-auth
+session    include      postlogin
+-session   optional     pam_ck_connector.so
+session    optional	pam_gnome_keyring.so auto_start