mjhjmtu

I am aware of the following two login workflows for a single-user computer:

1. Passwordless auto-login

• Start machine


• Skip login screen


• GNOME session starts immediately
  
  
  • Keyring is unlocked (no password)
  
  


• Session is protected when lock screen appears

Here the session is available immediately (you can start your machine, walk away and it's ready to use when you come back) but also available to passers-by.

2. Password-protected login screen

• Start machine


• Wait at login screen (password protected)


• GNOME session starts
  
  
  • Keyring is unlocked (either no password, or password passed through)
  
  


• Session is protected when lock screen appears

Here the session is not available immediately (you must wait for the login screen before you can walk away), but is protected from passers before login at startup. It is not protected when the session actually starts.

I was wondering if it is possible to instead implement the following startup/login workflow in GNOME Shell:

3. Password-protected lock screen

• Start machine


• Skip login screen


• GNOME session starts immediately
  
  
  • Keyring is unlocked (???)
  
  
  • Lock screen shows immediately (password protected)
  
  


• Session is protected when lock screen appears again

Here the session is not available immediately (you can walk away after starting the machine but need to enter a password when you return). The "login" delay is the same as walking up to a locked session. Additionally, if you start your machine and walk away, it is protected from passers-by.