| 21 Dec 2024 |
 K900 | FYI I changed Mutter to propagate Mesa on -next | 18:55:56 |
| K900 | Because it requires Mesa headers in a few places | 18:56:04 |
| 22 Dec 2024 |
|  @stablejoy:matrix.org left the room. | 13:25:13 |
 Arian | back again with gnome-keyring-daemon questions. As I'm so annoyed by the default ssh-agent behaviour but can't find a way to disable it without disabling gnome-keyring completely | 14:14:41 |
| Arian | the arch docs mention that Gnome split off the ssh functionality 3 years ago
The SSH functionality is disabled by default in gnome-keyring-daemon builds since version 1:46. It has been moved into /usr/lib/gcr-ssh-agent, which is part of the gcr-4 package.
https://wiki.archlinux.org/title/GNOME/Keyring
Why aren't we doing the same?
| 14:15:16 |
| Arian | Because currently I do not seem any way to disable the intrusive GNOME SSH agent stuff in NixOS | 14:16:44 |
| Arian | it seems to be all or nothing. Lose any kind of keyring functionality OR have GNOME intercept all your ssh stuff | 14:17:04 |
|  allrealmsoflife joined the room. | 15:55:03 |
 @kranzes:matrix.org | Solution: don't use ssh-agent at all | 16:09:49 |
| Arian | ssh-agent is so good though | 16:09:57 |
| Arian | i dont want to type in my passphrase every 2 seconds | 16:10:10 |
| @kranzes:matrix.org | nuh-uh | 16:10:10 |
| @kranzes:matrix.org | ☝️ | 16:10:16 |
| Arian | But the problem is that your solution is non-sensical | 16:10:35 |
| Arian | you cant disable the ssh-agent behaviour of gnome thats my whole point | 16:10:44 |
| @kranzes:matrix.org | Does it cache fido2 pin these days? | 16:10:49 |
| @kranzes:matrix.org | I have gnome keyring enabled | 16:11:04 |
| @kranzes:matrix.org | But don't have have ssh agent | 16:11:09 |
| Arian | thats impossible | 16:11:15 |
| Arian | gnome-keyring will inject SSH_AUTH_SOCK into your session automatically | 16:11:34 |
| Arian | it's more likely you're using ssh-agent without knowing | 16:11:56 |
| @kranzes:matrix.org | I'm not | 16:13:39 |
| Arian | how though | 16:13:44 |
| @kranzes:matrix.org | Idk i have to check my config | 16:13:59 |
| @kranzes:matrix.org | github.com/kranzes/nix-config | 16:14:13 |
| @kranzes:matrix.org | Not on computer rn | 16:14:18 |
| @kranzes:matrix.org | I only have gnome-kerying enabled in home-manager | 16:44:41 |
| @kranzes:matrix.org | Dec 22 18:42:59 pongo gnome-keyring-daemon[2793]: gnome-keyring-daemon: no process capabilities, insecure memory might get used
Dec 22 18:42:59 pongo gnome-keyring-daemon[2793]: discover_other_daemon: 1
Dec 22 18:42:59 pongo gnome-keyring-daemon[2793]: discover_other_daemon: 1SSH_AUTH_SOCK=/run/user/1000/keyring/ss
| 16:45:21 |
| @kranzes:matrix.org | these are the logs. I also don't have SSH_AUTH_SOCK set in my shell | 16:45:39 |
 Jan Tojnar | we should disable it in gnome-keyring by default, I missed that GNOME 46 already did that https://github.com/NixOS/nixpkgs/issues/140824 | 20:41:24 |
