rope/nixos
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

desktop: replace ly with greetd autologin + boot-locked quickshell

Browse source 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
rope 2026-07-08 17:03:26 +01:00
parent 1158a36d1a
commit 8efcc4d30c
2 changed files with 26 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

25
settings/desktop.nix
View file

@ -3,25 +3,30 @@
{ {
config = lib.mkIf (lib.elem config.networking.hostName [ "FredOS-Gaming" "FredOS-Macbook" ]) { config = lib.mkIf (lib.elem config.networking.hostName [ "FredOS-Gaming" "FredOS-Macbook" ]) {
services.xserver.enable = true; services.xserver.enable = true;
services.displayManager.ly.enable = true; # Autologin straight into Hyprland; the quickshell lockscreen engages
services.displayManager.defaultSession = "hyprland"; # immediately (see Lock.qml), so the lock *is* the login prompt.
services.greetd = {
enable = true;
settings.default_session = {
command = lib.getExe config.programs.hyprland.package;
user = "fred";
};
};
boot.plymouth.enable = true; boot.plymouth.enable = true;
boot.initrd.verbose = false; boot.initrd.verbose = false;
boot.consoleLogLevel = 3; boot.consoleLogLevel = 3;
boot.kernelParams = [ "quiet" "udev.log_level=3" ]; boot.kernelParams = [ "quiet" "udev.log_level=3" ];
services.displayManager.ly.settings = {
animation = "none";
bigclock = true;
};
# Flatpak for ad-hoc app installs via Bazaar # Flatpak for ad-hoc app installs via Bazaar
services.flatpak.enable = true; services.flatpak.enable = true;
# Secret Service for Chromium/Electron credential encryption; # Secret Service for Chromium/Electron credential encryption.
# PAM unlocks the keyring with the login password at the ly greeter. # Autologin can't unlock the keyring (no password typed), so greetd only
# *starts* the daemon; the quickshell lockscreen authenticates against the
# "login" PAM service, where pam_gnome_keyring unlocks it on first unlock.
services.gnome.gnome-keyring.enable = true; services.gnome.gnome-keyring.enable = true;
security.pam.services.ly.enableGnomeKeyring = true; security.pam.services.greetd.enableGnomeKeyring = true;
security.pam.services.login.enableGnomeKeyring = true;
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
nemo # file manager nemo # file manager

11
settings/quickshell.nix
View file

@ -198,6 +198,7 @@ in
onChange = qsRestart; onChange = qsRestart;
text = '' text = ''
import Quickshell import Quickshell
import Quickshell.Io
import Quickshell.Wayland import Quickshell.Wayland
import Quickshell.Services.Pam import Quickshell.Services.Pam
import QtQuick import QtQuick
@ -225,6 +226,16 @@ in
pam.start(); pam.start();
} }
// greetd autologs us in, so lock as soon as the shell comes up:
// the lockscreen is the login prompt. mkdir is the atomic
// once-per-session test — XDG_RUNTIME_DIR dies with the
// session, so quickshell restarts (rebuilds) don't re-lock.
Process {
running: true
command: ["mkdir", Quickshell.env("XDG_RUNTIME_DIR") + "/qs-boot-lock"]
onExited: code => { if (code === 0) lock.locked = true; }
}
PamContext { PamContext {
id: pam id: pam
// NixOS ships a "login" pam service; pam_unix verifies the // NixOS ships a "login" pam service; pam_unix verifies the