KDE Wallet (简体中文)

From ArchWiki
Jump to navigation Jump to search
翻译状态: 本文是英文页面 KDE Wallet翻译,最后翻译时间:2017-10-18,点击这里可以查看翻译后英文页面的改动。

KDE Wallet Manager 是一个用于管理 KDE Plasma 上密码的工具。它将用于在 KDE 上访问和管理你的密码

在登录时自动解锁 Kwallet

如果您的 KWallet 密码与您的用户名密码相同,您可以在登录时自动解锁您的 KWallet。

安装 kwallet-pam 包,

如果没有使用 SDDM 登陆管理器,需要编辑您的登录管理器 pam (通常位于 /etc/pam.d ) 文件,并在其相应部分下添加:

auth            optional        pam_kwallet5.so
session         optional        pam_kwallet5.so auto_start

例如 LightDM 需要修改 /etc/pam.d/lightdm/etc/pam.d/lightdm-greeter 文件:

auth            include         system-login
auth            optional        pam_kwallet5.so
account         include         system-login
password        include         system-login
session         include         system-login
session         optional        pam_kwallet5.so auto_start

如果是 GDM,编辑/etc/pam.d/gdm-password。重新启动后,如果您的用户密码与 KWallet 密码相同,您的 KWallet 将自动解锁。

Note: Currently, kwallet-pam has at least two limitations: first, it's not compatible with GnuPG keys, so KDE Wallet must use the standard blowfish encryption. Also, the wallet name must be "kdewallet" (that's the default name). If, for some reason, you create a new wallet, you need to use this name (so you will probably need to rename the old wallet too).

使用 KDE Wallet 存储 ssh keys

首先, 你要确保你正在运行一个 SSH agent

Install the ksshaskpass package.

Create an autostart file and mark it executable with chmod:

ssh-add </dev/null

Tango-go-next.pngThis article or section is a candidate for moving to KDE#Autostarting applications.Tango-go-next.png

Notes: General autostarting instructions belong there (Discuss in Talk:KDE Wallet (简体中文)#)
Tip: The above ssh-add.sh script will only add the default key ~/.ssh/id_rsa. Assuming you have different SSH keys named key1, key2, key3 in ~/.ssh/, you may add them automatically on login by changing the above script to:
ssh-add $HOME/.ssh/key1 $HOME/.ssh/key2 $HOME/.ssh/key3 </dev/null

You also have to set the SSH_ASKPASS environment variable, see Environment variables#Defining variables. E.g.:

export SSH_ASKPASS="/usr/bin/ksshaskpass"

It will ask for your password and unlock your SSH keys. Upon restart your SSH keys should be unlocked once you give your kwallet password.

To add a new key and store the password with kwallet use the following command

$ ssh-add /path/to/new/key </dev/null

and append the key to the list of keys in ~/.config/autostart-scripts/ssh-add.sh as explained above to have it unlocked upon providing the kwallet password.

KDE Wallet for Firefox

There is an addon to make Firefox store passwords with KDE5 Wallet.

KDE Wallet for Chrome and Chromium

Chrome/Chromium has built in wallet integration. To enable it, run Chromium with the --password-store=kwallet or --password-store=detect argument. To make the change persistent, see Chromium/Tips and tricks#Making flags persistent. (Setting CHROMIUM_USER_FLAGS will not work.)

See also