Bug 2556316

Summary:	Adapt to replacement of gnome-keyring with oo7
Product:	[Fedora] Fedora	Reporter:	Adam Williamson (Fedora) <rhbz>
Component:	mate-desktop	Assignee:	Wolfgang Ulbrich <raveit65.sun>
Status:	ASSIGNED ---	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	45	CC:	raveit65.sun, redhat-bugzilla
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Adam Williamson (Fedora) 2026-10-20 16:14:42 UTC

In Fedora 45, gnome-keyring has been replaced by oo7: https://fedoraproject.org/wiki/Changes/oo7_Secrets_Service_Provider

Up until just yesterday, nothing obsoleted gnome-keyring so things could keep relying on it, but with https://src.fedoraproject.org/rpms/oo7/c/5b65f196f8c0de16cad7cf9f0dcb7ff4f96a94f8?branch=rawhide , oo7 now obsoletes gnome-keyring.

Assuming MATE was relying on gnome-keyring (which I guess it was as mate-keyring went away long ago), it should adapt to using oo7 instead. This mostly involves ensuring it gets run at session start, I believe. You'll also want to ensure it runs during any initial-setup utility, if it needs to configure wifi or do anything else involving secrets.

See https://bugzilla.redhat.com/show_bug.cgi?id=2549612 for some discussion on how Cinnamon did it.

Comment 1 Wolfgang Ulbrich 2026-10-23 13:25:14 UTC

So, gnome-keyring can be used until oo7 will be installed, right? 
I will talk to mate upstream to find a solution to start oo7 at session start. Sadly oo7 isn't an application.
But i am pretty sure that won't be ready for f45 release. So installing oo7 with a base package group in general fedora will be a bad idea.
Mate doesn't use an rc-file like cinnamon. So we need to implement that somewhere in our code.

Comment 2 Adam Williamson (Fedora) 2026-10-23 15:48:28 UTC

> So, gnome-keyring can be used until oo7 will be installed, right? 

Well sort of, yeah, but you'll have a problem if anything with a dep chain to oo7-daemon happens to get installed I think as it'll obsolete gnome-keyring.

> But i am pretty sure that won't be ready for f45 release. So installing oo7 with a base package group in general fedora will be a bad idea.

I don't think we're doing that. Most desktops that have migrated are listing pam_oo7 in their specific comps groups. GNOME pulls it in by gdm depending on pam_oo7. So if you're not including gdm I think you're OK for a base install at least.