PAM_SYSTEMD_LOADKEY(8) pam_systemd_loadkey PAM_SYSTEMD_LOADKEY(8) pam_systemd_loadkey - PAM pam_systemd_loadkey.so pam_systemd_loadkey NUL PAM pam_get_authtok(3). "" systemd-ask-password(1) --keyname=. pam_systemd_loadkey keyname=. : keyname= . "cryptsetup". systemd-cryptsetup@.service(8) PIN . LUKS2 link-volume-key crypttab(5). 1. . +-------------------+----------------------------+ | | | +-------------------+----------------------------+ |cryptsetup | | | | | | | | | | | +-------------------+----------------------------+ |fido2-pin | PIN | | | | +-------------------+----------------------------+ |luks2-pin | PIN | | | LUKS2 | +-------------------+----------------------------+ |tpm2-pin | PIN TPM2 | +-------------------+----------------------------+ 255. debug . 255. LUKS Gnome Keyring / KDE KWallet . . Gnome Keyring/KWallet LUKS. PAM /etc/pam.d/ ( sddm-autologin): -auth optional pam_systemd_loadkey.so -auth optional pam_gnome_keyring.so -session optional pam_gnome_keyring.so auto_start -session optional pam_kwallet5.so auto_start systemd : [Service] KeyringMode=inherit systemd-cryptsetup@.service(8) "cryptsetup". pam_systemd_loadkey PAM pam_gnome_keyring pam_kwallet5 . 3 . . : . systemd 260.1 PAM_SYSTEMD_LOADKEY(8)