> > Opinions? It's a tough situation, with no good answer.
>SOLUTION 2: > * Ignore it and hope people will read my blog https://tsdgeos.blogspot.com/2020/05/kwallet-pam-5184-and-ecryptfs-homes.html We can simplify the bit about needing another user. If you use sudo mount --bind / /tmp/IAmACoolNewMount you should be able to retrieve the file in the unmounted /home That would then potentially allow this to be a shipped script to run. Albeit user interaction and root would still be required, but a run-once migration might be easier to write and maintain than long term hacks in the pam side.