Goodix 27c6:538d Fingerprint Reader on Arch Linux

Stock libfprint does not handle the TLS handshake or matcher for the Goodix 27c6:538d press sensor, so the reader is dead hardware on most Arch installs. This packages a working fork, wires it into system authentication, and stops the next pacman upgrade from silently undoing all of it.

Source code

Cover artwork for Goodix 27c6:538d Fingerprint Reader on Arch Linux

Device: 27c6:538d
Auth surfaces: sudo · polkit · lock
Survives: pacman -Syu

What I built

Packaged a libfprint fork (OpenCV SIGFM matcher) pinned to a known-good commit as `libfprint-goodix-538d`, building from source with meson and cmake
Diagnosed why stock libfprint fails on this reader — the device's TLS handshake and matcher path are unsupported upstream
Pinned the package with pacman `IgnorePkg` and added an Omarchy post-update hook that reinstalls the driver if an upgrade drops it
Wrote a udev rule keeping the reader out of USB autosuspend, plus an fprintd drop-in exposing reader dumps for debugging
Shipped an idempotent installer and an `enable-fingerprint-auth.sh` script that switches fingerprint auth on for sudo, polkit and the lock screen — with a `--remove` path to reverse it