Debian and Ubuntu

Each release carries an amd64 and an arm64 .deb. Install it with lys-wm, which the display manager shows the greeter in, and optionally lys-secrets, from their own releases:

sudo apt install ./lys-login_<version>_amd64.deb ./lys-wm_<version>_amd64.deb

On arm64 the files end in _arm64.deb.

The package needs libpam0g, libpam-systemd and systemd, and recommends lys-wm, lys-secrets, libvulkan1 and mesa-vulkan-drivers.

What it installs

• /usr/bin/lys-login, which lys-shell runs for the lock screen;
• lys-login.service, the display manager on VT 1 with the greeter in /usr/bin/lys-wm (Alias=display-manager.service), installed but not enabled;
• the lys-greeter system user (sysusers.d) and its state directory /var/lib/lys-greeter (tmpfiles.d);
• two PAM services written for the distribution: lys-login, which the display manager logs in through, and lys-shell, which the lock screen unlocks with.

Switch display managers

Disable the current one and enable lys-login, for example:

sudo systemctl disable gdm
sudo systemctl enable lys-login

It starts with graphical.target. A system that boots to multi-user.target also needs sudo systemctl set-default graphical.target. Reboot, or stop the old display manager and start lys-login, which ends the session running on it. To go back, disable lys-login and enable the old one.

The greeter reads /etc/lys-shell/config.yaml, which the package leaves to you: see Configuration.

The lock screen

Set the service in your lys-shell config:

login:
  lock:
    pam-service: lys-shell

With lys-splash

The unit is written for lys-splash and takes the screen from it without a blank frame when it is at /usr/bin/lys-splash. Without it, those steps do nothing.