This repository has no description
tools.pinentry-rofi: use user keyring instead of session keyring
The session keyring (@s) wasn't persisting keys when accessed from
systemd user services. Switch to user keyring (@u) which is shared
across all processes for the same UID.
author
lassulus
date
(Feb 15, 2026, 6:00 PM CET)
commit
57b518f6
57b518f6f09b256ff68f921c63925c9dd01b2ae7
parent
47f0e148
47f0e148c83627b40b88da415a67e17ffb205993
+3
-3
+3
-3
tools/pinentry-rofi/pinentry-rofi.sh
+3
-3
tools/pinentry-rofi/pinentry-rofi.sh
···
10
10
# Get cached PIN from kernel keyring
11
11
get_cached_pin() {
12
12
local key_id
13
-
key_id=$(keyctl search @s user "$CACHE_KEY" 2>/dev/null) || return 1
13
+
key_id=$(keyctl search @u user "$CACHE_KEY" 2>/dev/null) || return 1
14
14
keyctl pipe "$key_id" 2>/dev/null
15
15
}
16
16
···
21
21
keyctl purge user "$CACHE_KEY" >/dev/null 2>&1 || true
22
22
# Add new key with timeout (using padd to avoid PIN in /proc/*/cmdline)
23
23
local key_id
24
-
key_id=$(printf '%s' "$pin" | keyctl padd user "$CACHE_KEY" @s) || return 0
24
+
key_id=$(printf '%s' "$pin" | keyctl padd user "$CACHE_KEY" @u) || return 0
25
25
keyctl timeout "$key_id" "$CACHE_TIMEOUT" || true
26
26
}
27
27
28
28
# Extend cache timeout (sliding window)
29
29
extend_cache() {
30
30
local key_id
31
-
key_id=$(keyctl search @s user "$CACHE_KEY" 2>/dev/null) || return 0
31
+
key_id=$(keyctl search @u user "$CACHE_KEY" 2>/dev/null) || return 0
32
32
keyctl timeout "$key_id" "$CACHE_TIMEOUT" || true
33
33
}
34
34