From ArchWiki
Revision as of 20:52, 20 March 2012 by L1mpm4rk (talk | contribs) (SSH Keys)
Jump to navigation Jump to search

The GNOME Keyring stores passwords in an encrypted file that can be accessed by applications.

Manage using GUI

pacman -S seahorse

It is possible to leave the gnome keyring password blank. In seahorse, on the Passwords tab, right click on "Passwords: login" and pick "Change password." Enter the old password and leave empty the new password. You will be warned about using unencrypted storage; continue by pushing "Use Unsafe Storage."

Use Without Gnome

It is possible to use GNOME Keyring without the rest of the gnome desktop. This can be accomplished by adding to your .xinitrc:

# Start a dbus-session
source /etc/X11/xinit/xinitrc.d/30-dbus
# Start Gnome-Keyring
/usr/bin/gnome-keyring-daemon --start --components=gpg,pkcs11,secrets,ssh

See Bug #13986 for more info.

SSH Keys

To add your SSH key:

$ ssh-add ~/.ssh/id_dsa
Enter passphrase for /home/mith/.ssh/id_dsa:

To list automatically loaded keys:

$ ssh-add -L

To disable all keys;

$ ssh-add -D

Now when you connect to a server, the key will be found and a dialog will popup asking you for the passphrase. It has an option to automatically unlock the key when you login. If you check this you won't need to enter your passphrase again!

The gnome-keyring dialog does not appear in some terminals when connecting with SSH


Add the following lines to your ~/.bashrc

SSH_AUTH_SOCK=`netstat -xl | grep -o '/tmp/keyring-.*/ssh$'`
[ -z "$SSH_AUTH_SOCK" ] || export SSH_AUTH_SOCK

If you run on your terminal the following:


will return something like the following:


Now when you connect with ssh, gnome-keyring dialog will launch the "entry of the passphrase"

Unlock at Startup

GNOME's login manager (gdm) will automatically unlock the keyring once you login, for others it isn't so easy.

For SLiM, see SLiM#SLiM_and_Gnome_Keyring