92d4212019
more grammar
2024-02-11 22:19:52 -08:00
c69295975c
few more cleanups
2024-02-11 21:48:35 -08:00
c6052c9028
simplify console output, use generic info
2024-02-11 21:09:11 -08:00
fbd7008a16
more grammar and formatting
2024-02-11 17:43:45 -08:00
152f7fb262
grammar and style
2024-02-11 15:37:31 -08:00
cfe0fa282d
grammar and standardize storage terminology
2024-02-11 13:56:32 -08:00
24ca007315
standardize Certify/Subkeys, easier command copy, organize links
2024-02-11 12:36:47 -08:00
c0b4ca6f78
Merge pull request #416 from Paraphraser/20240210-disable-ccid-master
...
add step to set `disable-ccid` in `scdaemon.conf`
2024-02-11 02:34:37 +00:00
5c3a4e8b18
fix rookie mistake
...
Add a one-liner that works. Then think about the context and decide to
recommend a rearrangement. And then muck up the consequential adjustment
of the original one-liner. I think I got a badge for that in the scouts.
Well spotted. Sorry.
Signed-off-by: Phill Kelley <34226495+Paraphraser@users.noreply.github.com>
2024-02-11 09:32:04 +11:00
b2d55a80de
Merge pull request #408 from jpickwell/patch-1
...
Quote Debian Live ISO URL, and add $ to AWK RegExp.
2024-02-10 17:21:32 +00:00
db9316a8ce
Merge pull request #411 from motiejus/motiejus-flake
...
NixOS Live Image: convert to a flake
2024-02-10 17:21:06 +00:00
87cb057de5
Merge pull request #414 from colingrady/genuine_link
...
Update link to genuine device check info
2024-02-10 17:19:41 +00:00
f8fcb0c2d1
add step to set `disable-ccid` in `scdaemon.conf`
...
Issue #404 reports "GPG acts like my YubiKey isn't plugged in".
With GnuPG 2.3 and later, the system can get into a loop where it
prompts for insertion of a YubiKey even though that YubiKey is already
connected.
The solution for this is to set `disable-ccid` in
`~/.gnupg/scdaemon.conf`.
Testing suggests setting `disable-ccid` does not interfere with earlier
versions of GnuPG (eg 2.2.27 on Debian Bullseye or 2.2.40 on Debian
Bookworm).
This problem has also been mentioned in #277 and #256 . Including a step
in the Guide to set `disable-ccid` may help minimise recurrence.
Also takes the opportunity to ensure `~/.gnupg` directory exists on a
new system before downloading `gpg.conf`.
References:
* Ludovic Rousseau
- [GnuPG and PC/SC conflicts](https://ludovicrousseau.blogspot.com/2019/06/gnupg-and-pcsc-conflicts.html )
* GnuPG.org:
- [Scdaemon Options](https://www.gnupg.org/documentation/manuals/gnupg/Scdaemon-Options.html#index-disable_002dccid )
* YubiCo:
- [Resolving GPG's CCID conflicts](https://support.yubico.com/hc/en-us/articles/4819584884124-Resolving-GPG-s-CCID-conflicts )
- [Troubleshooting Issues with GPG](https://support.yubico.com/hc/en-us/articles/360013714479-Troubleshooting-Issues-with-GPG )
* Closed issues:
- [277 pcscd: Error Reader Exclusive](https://github.com/drduh/YubiKey-Guide/issues/277 )
- [256 Update scdaemon.conf for gnupg 2.3 with MacOS (and possibly others)](https://github.com/drduh/YubiKey-Guide/issues/256 )
Fixes #404
Signed-off-by: Phill Kelley <34226495+Paraphraser@users.noreply.github.com>
2024-02-10 14:11:33 +11:00
84c9d9654d
NixOS Live Image: convert to a flake
...
Now `nixpkgs` will be pointing to a specific release, which has a much
smaller chance to unexpectedly break. Currently 23.11. The next one will
be 24.05, 24.11, etc.
NixOS *releases* receive security updates, but packages are upgraded
conservatively, thus don't generally break. As a result, we should need
to worry about NixOS upgrades every 6-12 months. The upgrade means "bump
the version number and try to build it". If it breaks, it will generally
break only then. Less reactive, more proactive surprises.
`flake.nix` was written by @thomaseizinger in
https://github.com/drduh/YubiKey-Guide/issues/406 . Changes from the
original:
- change Gnome to xfce. Now it loads with 384MB of RAM and works well
with the simplest graphics (hello qemu).
- less nasty workaround for hopenpgp-tools. Fixed upstream
(https://github.com/NixOS/nixpkgs/pull/279117 ).
- do not default `copytoram`, user can select this option in the
bootloader.
Here is how to test it:
```
$ nix run .#nixosConfigurations.yubikeyLive.x86_64-linux.config.system.build.vm
```
*Note for the maintainer*: it would be great if you could occasionally
run `nix flake update --commit-lock-file`, *especially* after updating
github.com/drduh/config.git.
Fixes #406
Co-authored-by: Thomas Eizinger <thomas@eizinger.io>
2024-02-04 14:03:54 +02:00
80a90f8813
Update link to genuine device check info
2024-01-25 08:28:01 -07:00
adf11bfdd5
Update README.md
...
Quote ISO URL, and add `$` RegExp end-of-string anchor to return only the ISO file and none of the other entries that contain `xfce.iso`.
This avoids unnecessary cURL errors.
2024-01-04 12:49:36 -06:00
f2e5ef2c18
Merge pull request #401 from wildwestrom/master
...
Fix NixOS image: replace deprecated option boot.cleanTmpDir -> boot.tmp.cleanOnBoot
2023-12-10 15:17:13 -08:00
7dedee95e0
Fix deprecated boot.cleanTmpDir for boot.tmp.cleanOnBoot
2023-10-21 03:22:22 +00:00
c41729520f
Merge pull request #399 from drduh/wip-15oct23
...
Remove ancient keyservers
2023-10-15 21:04:02 -07:00
f76004cffc
Update debian version
2023-10-15 21:02:59 -07:00
41f3cce9f0
Remove ancient keyservers
2023-10-15 20:50:42 -07:00
703c6aa37f
Merge pull request #386 from Xronophobe/docs/update-debian-12-live
...
add notes for installing #Required Software on Debian 12
2023-10-15 16:19:26 -07:00
5d1e524af5
Merge pull request #387 from dkarlovi/patch-1
...
fix: add an explicit example about publishing the pubkey when expiring
2023-10-15 16:19:00 -07:00
ce29f5db92
Merge pull request #395 from alhirzel/patch-1
...
Add link to "makegpg" tool
2023-10-15 16:13:47 -07:00
dc201e90cd
Merge pull request #396 from zeorin/fix/nixos
...
Fix NixOS LiveCD image build
2023-10-15 16:12:53 -07:00
320f4ef4cb
Merge pull request #398 from askiiart/master
...
Update rpmsphere version
2023-10-15 15:24:53 -07:00
687ff41fb0
fix: use `nix-build` instead of `nix build`
...
`nix build` is a new "Nix command" that is technically still experimental.
2023-10-14 12:29:34 +02:00
6c422ee16f
fix: update `hopenpgp-tools` in the NixOS build
...
Fixes https://github.com/drduh/YubiKey-Guide/issues/370 .
2023-10-14 12:29:23 +02:00
1035e1ab39
Update rpmsphere version
2023-10-10 16:53:17 +00:00
3f92a76287
Add link to "makegpg" tool
2023-09-22 10:28:23 -04:00
d4b3e5215b
add note for installing yubikey-manager on Debian 12
2023-08-18 19:40:26 +02:00
ec47fa32d6
add note on installing hopenpgp-tools on Debian 12
2023-08-18 19:30:57 +02:00
2383a66823
fix bad copy paste
2023-08-14 10:19:42 +02:00
4a641dffd0
Merge pull request #391 from FedericoSchonborn/master
...
Required Software/NixOS: Replace yubioath-desktop with yubioath-flutter
2023-08-13 13:25:14 -07:00
f486224f5d
Merge pull request #388 from Paraphraser/20230628-multiple-hosts-master
...
2023-06-28 Add section on setting up multiple hosts
2023-08-13 13:23:52 -07:00
e89e855bb4
Merge pull request #383 from o-kotb/master
...
Update ykman set-touch instructions
2023-08-13 13:11:05 -07:00
b62293979b
Merge pull request #380 from smoores-dev/adduid
...
Add instructions for adding a new identity
2023-08-13 13:10:43 -07:00
b047e2f666
Merge pull request #379 from Dreista/patch-1
...
Fix typo
2023-08-13 13:09:12 -07:00
649c8fd78e
Merge pull request #377 from taigrr/polkit-req-376
...
add polkit rule troubleshooting tip
2023-08-13 13:09:02 -07:00
018f7d0e68
Required Software/NixOS: Replace yubioath-desktop with yubioath-flutter
...
Trying to use yubioath-desktop results on this error:
yubioath-desktop has been deprecated by upstream in favor of yubioath-flutter
On the current stable channel (23.05).
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
2023-07-16 01:09:42 -03:00
61def5abda
add missing code-fence language indicators + zap extraneous tabs
...
Signed-off-by: Phill Kelley <34226495+Paraphraser@users.noreply.github.com>
2023-06-29 14:24:25 +10:00
008f1caf79
explain use of card URL field to obtain public key from keyserver
...
Signed-off-by: Phill Kelley <34226495+Paraphraser@users.noreply.github.com>
2023-06-29 11:35:30 +10:00
0310feaecc
2023-06-28 Add section on setting up multiple hosts
...
Issue #382 suggests adding a section explaining how to use the same
YubiKey on multiple hosts.
This PR incorporates most of the suggestions.
Fixes: #382
Signed-off-by: Phill Kelley <34226495+Paraphraser@users.noreply.github.com>
2023-06-28 23:44:09 +10:00
3caab5bacf
fix typo
2023-06-26 11:21:22 +02:00
619537629f
fix: add an explicit example about publishing the pubkey when expiring
2023-06-26 11:19:08 +02:00
327307dc46
Update ykman set-touch instructions
2023-05-15 10:52:19 +03:00
bc6582062c
Add instructions for adding a new identity
2023-04-15 21:31:29 -04:00
fefe40f36d
Fix typo
...
pegant -> pageant
2023-03-31 03:55:58 -04:00
ec2e8cae7e
add polkit rule troubleshooting tip
2023-03-21 15:57:51 -07:00
fec6e92b8f
Merge pull request #372 from PhilipMay/patch-2
...
Mac command to activate change for pinentry.
2023-03-19 10:42:26 -08:00
drduh
Phill Kelley
Motiejus Jakštys
Colin Grady
Jordan Pickwell
West
Xandor Schiefer
askiiart
Alex Hirzel
Csanad Beres
Dalibor Karlović
Federico Damián Schonborn
Omar Kotb
Shane Friedman
Kumiko as a Service
Tai Groot