Fedora 44 on the Framework Laptop 13 Pro

[Dmitrii_Timoshenko]

If you get fingerprint login working on Fedora, you’ll likely hit this next: GDM unlocks fine but GNOME Keyring stays locked, because fprint only passes yes/no, not the password. Wrote a PAM module that seals the keyring password in the TPM instead, so fingerprint unlocks it the same way password login does. Details and setup here if useful:

Auto-unlock GNOME Keyring with fingerprint via TPM sealing (Fedora/Ubuntu/Debian, works on FW13 Pro)

If you use fingerprint login on GDM, you’ve probably run into this: it unlocks your session but GNOME Keyring stays locked, because fprint only returns a yes/no, not your password. So every app that needs the keyring pops up a separate password prompt, or people just disable the keyring lock entirely and store secrets in plaintext. I wrote a small PAM module that avoids both of those. Instead of storing the keyring password anywhere in the open, it seals it inside the TPM and binds the seal to …