bernardo/Nomarchy
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(menu): #55 System › Fingerprint enroll/list/PAM

Browse Source 
Self-gated System › Fingerprint when fprintd is on PATH: enroll, list,
verify, delete-all (terminal), and Use for login writing
settings.fingerprint.pam (hardware.nix default from theme-state). Close #55.

Verified: V1 (HM menu rebuild). V3 pending: real-reader enroll (HARDWARE-QUEUE).
This commit is contained in:
Bernardo Magri
2026-07-10 08:45:33 +01:00
parent 2ef0a8b710
commit e81529c1bb
4 changed files with 96 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

61
modules/home/rofi.nix
View File

@@ -702,6 +702,62 @@ ${themeRows}
fi
printf "\nEnter to close."; read -r _' ;;
fingerprint)
# System ▸ Fingerprint — enroll/list/delete + optional PAM for
# login/sudo (HARDWARE.md §5, BACKLOG #55). Self-gated on fprintd
# CLI (services.fprintd). Enroll is interactive → terminal.
command -v fprintd-list >/dev/null 2>&1 \
|| { notify-send "Fingerprint" "fprintd not available (nomarchy.hardware.fingerprint.enable?)."; exit 0; }
pam=$(nomarchy-theme-sync get settings.fingerprint.pam 2>/dev/null || echo false)
case "$pam" in true|True) pam_label="Use for login (on)" ;; *) pam_label="Use for login (off)" ;; esac
choice=$( {
row "Enroll finger" preferences-desktop-user-password
row "List enrolled" view-list
row "Verify" dialog-password
row "Delete all" edit-delete
row "$pam_label" system-lock-screen
back
} | rofi -dmenu -show-icons -p Fingerprint) || exit 0
case "$choice" in
"$BACK") exec "$0" system ;;
*Enroll*)
exec ${cfg.terminal} -e sh -c '
echo "== Enroll fingerprint for $USER =="
fprintd-enroll || true
printf "\nEnter to close."; read -r _' ;;
*List*)
exec ${cfg.terminal} -e sh -c '
echo "== Enrolled fingers for $USER =="
fprintd-list "$USER" || true
printf "\nEnter to close."; read -r _' ;;
*Verify*)
exec ${cfg.terminal} -e sh -c '
echo "== Verify fingerprint for $USER =="
fprintd-verify || true
printf "\nEnter to close."; read -r _' ;;
*"Delete all"*)
exec ${cfg.terminal} -e sh -c '
echo "== Delete all fingerprints for $USER =="
printf "Type yes to delete every enrolled finger: "
read -r ans
case "$ans" in
yes) fprintd-delete "$USER" || true ;;
*) echo "Cancelled." ;;
esac
printf "\nEnter to close."; read -r _' ;;
*"Use for login"*)
case "$pam" in true|True) new=false ;; *) new=true ;; esac
if [ "$new" = true ]; then
if fprintd-list "$USER" 2>/dev/null | grep -qiE 'no fingers enrolled|No devices available'; then
notify-send "Fingerprint" "Enroll a finger first, then enable login."
exit 0
fi
fi
nomarchy-theme-sync --quiet set settings.fingerprint.pam "$new" --no-switch
notify-send "Fingerprint" "Use for login: $new — applies on next sys-rebuild."
;;
esac ;;
controlcenter)
# Nomarchy TUI Control Center.
exec ${cfg.terminal} -e nomarchy-control-center ;;
@@ -811,6 +867,8 @@ ${themeRows}
# Firmware/LVFS updates — self-gated on fwupd (default-on, but off
# on VMs/headless via services.fwupd.enable=false), like Printers.
command -v fwupdmgr >/dev/null 2>&1 && row "Firmware" firmware-manager
# Fingerprint — self-gated on fprintd CLI (services.fprintd; BACKLOG #55).
command -v fprintd-list >/dev/null 2>&1 && row "Fingerprint" preferences-desktop-user-password
command -v nomarchy-control-center >/dev/null 2>&1 && row "Control Center" preferences-desktop
if has_system_battery && command -v powerprofilesctl >/dev/null 2>&1; then
row "Power profile" preferences-system-power
@@ -835,6 +893,7 @@ ${themeRows}
*Rollback*) exec "$0" rollback ;;
*Doctor*) exec "$0" doctor ;;
*Firmware*) exec "$0" firmware ;;
*Fingerprint*) exec "$0" fingerprint ;;
*"Control Center"*) exec "$0" controlcenter ;;
*"Power profile"*) exec "$0" power-profile ;;
*"Battery limit"*) exec "$0" batterylimit ;;
@@ -904,7 +963,7 @@ ${themeRows}
esac ;;
*)
echo "usage: nomarchy-menu [lookfeel|tools|system|power|power-profile|powermgmt|batterylimit|theme|clipboard|calc|files|emoji|web|network|bluetooth|audio|display|display-profile|printers|capture|colorpicker|keybinds|ask|dnd|nightlight|autotimezone|autocommit|vpn|snapshot|doctor|firmware|controlcenter|rollback]" >&2
echo "usage: nomarchy-menu [lookfeel|tools|system|power|power-profile|powermgmt|batterylimit|theme|clipboard|calc|files|emoji|web|network|bluetooth|audio|display|display-profile|printers|capture|colorpicker|keybinds|ask|dnd|nightlight|autotimezone|autocommit|vpn|snapshot|doctor|firmware|fingerprint|controlcenter|rollback]" >&2
exit 64 ;;
esac
'';