#69 Pre-populate live session with blowfish-encrypted wallet
Closed: Deferred to upstream by ngraham. Opened by ngraham.

Otherwise, the first time you connect to a wifi networtk, you'll be asked to create a wallet to store the password, complete with a bunch of ridiculous technical Jargon (which is an upstream KDE issue) and it's a fairly unpleasant, unpolished user experience.

To avoid this you will need to create a blowfish-encrypted wallet named "kdewallet" and give it the same password as the password for the live session user.


Metadata Update from @ngompa:
- Issue tagged with: experience

Wouldn't this carry over to the installed session?

Actually, I guess it wouldn't if we created as part of the livesys setup script that runs when the ISO boots. But we don't have a password for liveuser...

This is precisely what pam-kwallet does (or is supposed to), isn't it?

That said, I also think I'll push harder to get plasma-nm to create connections for all users by default (is, let NetworkManager handle secrets). It'll sidestep the immediate motivation here as well as match behavior of other de's (gnome) and platforms (windows)

That would work too, yeah... at least for the live session. There's no need for the password to be saved in the wallet there.

Saving network credentials for all users universally would work too.

I think this issue is similar to what I described in #68. There were a couple of bug reports that could be related:
https://bugs.kde.org/show_bug.cgi?id=436442
https://bugzilla.redhat.com/show_bug.cgi?id=1955860

Metadata Update from @ngompa:
- Issue set to the milestone: Fedora 35

Nate, do you know of any ways how to implement what you suggest?

One tool suggested includes: kwalletcli
But I don't know much about that either. Still digging

Metadata Update from @rdieter:
- Issue set to the milestone: None (was: Fedora 35)

I have no idea, sorry.

IIRC this is done in the live sessions for Kubuntu and Neon; maybe you can see how they do it?

That would work too, yeah... at least for the live session. There's no need for the password to be saved in the wallet there.

Saving network credentials for all users universally would work too.

I created a MR: https://invent.kde.org/plasma/plasma-nm/-/merge_requests/61

Whether to do this on non-live images is something that should be discussed upstream. I wouldn't personally do this, some users will want to have their passwords secretly stored and they might have no clue they are actually stored in NM config files unencrypted.

With https://invent.kde.org/plasma/plasma-nm/-/merge_requests/61 being merged, this is no longer needed.

Thanks so much @jgrulich!

Metadata Update from @ngraham:
- Issue close_status updated to: Deferred to upstream
- Issue status updated to: Closed (was: Open)

Metadata