From 5bb5fb19db4d143d571cce4cd8d615562ceafbc5 Mon Sep 17 00:00:00 2001
From: Fabio Scotto di Santolo <fscottodev@pm.me>
Date: Tue, 17 Mar 2026 22:59:58 +0100
Subject: [PATCH] Add PAM password hook for gnome-keyring login

---
 ansible/roles/profile_desktop_i3/tasks/main.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/ansible/roles/profile_desktop_i3/tasks/main.yml b/ansible/roles/profile_desktop_i3/tasks/main.yml
index cd98058..9def1ae 100644
--- a/ansible/roles/profile_desktop_i3/tasks/main.yml
+++ b/ansible/roles/profile_desktop_i3/tasks/main.yml
@@ -29,6 +29,13 @@
     line: "session    optional  pam_gnome_keyring.so auto_start"
     state: present
 
+- name: Enable gnome-keyring PAM password hook
+  ansible.builtin.lineinfile:
+    path: /etc/pam.d/login
+    insertafter: '^password\s+include\s+system-local-login$'
+    line: "password   optional  pam_gnome_keyring.so use_authtok"
+    state: present
+
 - name: Copy desktop dotfiles
   ansible.builtin.copy:
     src: "{{ playbook_dir }}/../dotfiles/desktop/{{ item.src }}"