Can't disable services.gnome.gnome-keyring to replace it with home manager services.pass-secret-service

[BenediktBroich]

Describe the bug

Can't disable services.gnome.gnome-keyring.enable = false; to replace it with services.passSecretService.enable= true; or home manager services.pass-secret-service.enable= true; when services.xserver.desktopManager.gnome.enable = true; is enabled.

But i get following error.

error: The option `services.gnome.gnome-keyring.enable' has conflicting definition values:
       - In `/nix/store/fkx24s5smqs2xw88n7yx3xy2jk1gx80l-source/profiles/gnome': false
       - In `/nix/store/da9dyx30lsdgw2x2gnxkc88aq1d9fwik-source/nixos/modules/services/x11/desktop-managers/gnome.nix': true

Steps To Reproduce

configuration.nix

services = {
    xserver = {
      enable = true;
      displayManager.gdm.enable = true;
      desktopManager.gnome.enable = true;
    };
    gnome.gnome-keyring.enable = false;
    # passSecretService.enable = true;
  };
}

Home Manager

services.pass-secret-service.enable = true;

Expected behavior

I should be able to disable gnome.gnome-keyring.enable. Or maybe there should be an option to override org.freedesktop.secrets.service Exec as described in this Issue.?

Screenshots

Additional context

Last patch

• pass-secret-service: unstable-2020-04-12 -> unstable-2022-03-21

Source

• pass_secret_service
• pypass
• Secret Service API

Issue insights

• Documentation on how to enable
• busctl --user | grep secret output: org.freedesktop.secrets 21200 .gnome-keyring- bene :1.163 [email protected] - -
• but should be pass_secret_service

Related Issues

• Gnome-keyring auto-start files (DBus etc) conflict with other Secret Service providers
• Register as the default Secret Service provider (DBus service)

Notify maintainers

Pass Secret Service Maintainer
@aidalgol you are the maintainer of services.passSecretService so maybe you have some insights.

Gnome Maintainers
@bobby285271 @hedning @jtojnar @dasj19 @maxeaubrey

Metadata

Please run nix-shell -p nix-info --run "nix-info -m" and paste the result.

 - system: `"x86_64-linux"`
 - host os: `Linux 6.0.6, NixOS, 22.05 (Quokka), 22.05.20221105.f09ad46`
 - multi-user?: `yes`
 - sandbox: `yes`
 - version: `nix-env (Nix) 2.9.1`
 - channels(root): `"nixos-22.11pre425577.0533be43f1c"`
 - channels(user): `""`
 - nixpkgs: `/nix/var/nix/profiles/per-user/root/channels/nixos`

Thanks for you help!

[jtojnar]

You can use lib.mkForce to override the option. I think we did not make the gnome-keyring option just enabled by default because we were not sure if something won’t seriously break without the service.

[BenediktBroich]

Thanks. That did work. Here is my full configuration if someone else is searching for this.

configuration.nix

  services = {
    xserver = {
      enable = true;
      displayManager.gdm.enable = true;
      desktopManager.gnome.enable = true;
    };
    gnome.gnome-keyring = pkgs.lib.mkForce { enable = false; };
  };

home-manager

  services.pass-secret-service.enable = true;
  programs = {
    password-store = {
      enable = true;
      settings = {
        PASSWORD_STORE_DIR = ".password-store"; # pypass will search for this folder in your home directory DON'T ADD ~/
      };
    };
  };