Linux下systemd服务无法调用Python keyring模块的问题求助

从journalctl日志能明确定位问题：keyring.errors.NoKeyringError: No recommended backend was available。原因很直接：

• 手动启动脚本时，你处于用户桌面会话中，keyring后端（如GNOME Keyring）能获取到桌面会话的DBus环境变量，正常工作；
• systemd服务运行在无图形的系统会话中，缺少这些环境变量，导致默认keyring后端无法初始化。

下面提供三种解决方法，按可靠性和易用性排序：

方法一：改用权限严格的本地文件存储密码（推荐） #

这个方法避开keyring的环境依赖，直接用本地文件存储密码，只要保证文件权限仅自己可读就足够安全。

1. 创建凭证文件并设置严格权限：

touch ~/.db_credentials
chmod 600 ~/.db_credentials

2. 在文件中写入数据库凭证：

serverDB_user=你的远程数据库用户名
serverDB_pw=你的远程数据库密码
mysqlDB_user=本地数据库用户名
mysqlDB_pw=本地数据库密码

3. 修改Python脚本，读取这个凭证文件：

#!/usr/bin/env python3
# -*- coding: utf-8 -*-

import subprocess
import time
import os

# 读取本地凭证文件
credentials = {}
with open(os.path.expanduser('~/.db_credentials'), 'r') as f:
    for line in f:
        if '=' in line:
            key, value = line.strip().split('=', 1)
            credentials[key] = value

# 构造数据库命令
DB_backup_from_server = f"mysqldump --single-transaction --quick -v -h 192.168.0.97 -u {credentials['serverDB_user']} -p'{credentials['serverDB_pw']}' testDB > ~/testDB_backup.sql"
restore_backup_to_local_DB = f"mysql -v -u {credentials['mysqlDB_user']} -p'{credentials['mysqlDB_pw']}' testDB < ~/testDB_backup.sql"

commands = [DB_backup_from_server, restore_backup_to_local_DB]

execution_interval = 60*60
t0 = time.time() - execution_interval
while True:
    if time.time() - t0 > execution_interval:
        t0 = time.time()
        for cmd in commands:
            subprocess.run(cmd, 
                            stdout = subprocess.PIPE, 
                            universal_newlines = True,
                            shell = True)
    time.sleep(60)

4. 重新启动systemd服务：

sudo systemctl daemon-reload
sudo systemctl restart mysystemd.service

方法二：配置systemd服务加载keyring所需环境 #

如果坚持使用keyring，需要让systemd服务能访问用户的DBus会话，并确保keyring开机自动解锁。

1. 安装PAM模块实现keyring开机自动解锁：

sudo apt install libpam-gnome-keyring

2. 修改systemd服务文件，添加环境变量：

[Unit]
Description=My Script Service
Wants=network-online.target
After=network-online.target
After=multi-user.target
StartLimitIntervalSec=3600
StartLimitBurst=60

[Service]
Type=idle
User=masterofpuppets
Restart=on-failure
RestartSec=60s
WorkingDirectory=/home/masterofpuppets
# 设置DBus会话地址
Environment="DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/$(id -u masterofpuppets)/bus"
# 指定keyring后端为SecretService
Environment="PYTHON_KEYRING_BACKEND=keyring.backends.SecretService.Keyring"
ExecStart=/home/masterofpuppets/mypythonscript.py

[Install]
WantedBy=multi-user.target

3. 重新加载并重启服务：

sudo systemctl daemon-reload
sudo systemctl restart mysystemd.service

方法三：安装无桌面依赖的keyring后端 #

安装keyrings.alt模块，它提供不需要图形环境的keyring后端，分为明文和加密两种：

1. 安装模块：

pip3 install keyrings.alt

2. 修改Python脚本，指定使用后端：

#!/usr/bin/env python3
# -*- coding: utf-8 -*-

import subprocess
import keyring
from keyrings.alt.file import PlaintextKeyring
import time

# 明文存储后端（安全性低，仅适合测试）
keyring.set_keyring(PlaintextKeyring())

# 如果需要加密存储，改用EncryptedKeyring（需要手动设置主密码，不适合自动服务）
# from keyrings.alt.file import EncryptedKeyring
# kr = EncryptedKeyring()
# kr.set_password("encryption_key", "", "你的主密码")
# keyring.set_keyring(kr)

DB_backup_from_server = f"mysqldump --single-transaction --quick -v -h 192.168.0.97 -u {keyring.get_password('serverDB', 'user')} -p'{keyring.get_password('serverDB', 'pw')}' testDB > ~/testDB_backup.sql"
restore_backup_to_local_DB = f"mysql -v -u {keyring.get_password('mysqlDB', 'user')} -p'{keyring.get_password('mysqlDB', 'pw')}' testDB < ~/testDB_backup.sql"

commands = [DB_backup_from_server, restore_backup_to_local_DB]

execution_interval = 60*60
t0 = time.time() - execution_interval
while True:
    if time.time() - t0 > execution_interval:
        t0 = time.time()
        for cmd in commands:
            subprocess.run(cmd, 
                            stdout = subprocess.PIPE, 
                            universal_newlines = True,
                            shell = True)
    time.sleep(60)

内容的提问来源于stack exchange，提问作者masterofpuppets