At login via pam, see man 5 environment for details: https://www.man7.org/linux/man-pages/man5/pam_env.conf.5.htm...