Commit message (Collapse) | Author | Files | Lines | ||
---|---|---|---|---|---|
2024-02-04 | NixOS Live Image: convert to a flake | Motiejus Jakštys | 1 | -208/+21 | |
Now `nixpkgs` will be pointing to a specific release, which has a much smaller chance to unexpectedly break. Currently 23.11. The next one will be 24.05, 24.11, etc. NixOS *releases* receive security updates, but packages are upgraded conservatively, thus don't generally break. As a result, we should need to worry about NixOS upgrades every 6-12 months. The upgrade means "bump the version number and try to build it". If it breaks, it will generally break only then. Less reactive, more proactive surprises. `flake.nix` was written by @thomaseizinger in https://github.com/drduh/YubiKey-Guide/issues/406. Changes from the original: - change Gnome to xfce. Now it loads with 384MB of RAM and works well with the simplest graphics (hello qemu). - less nasty workaround for hopenpgp-tools. Fixed upstream (https://github.com/NixOS/nixpkgs/pull/279117). - do not default `copytoram`, user can select this option in the bootloader. Here is how to test it: ``` $ nix run .#nixosConfigurations.yubikeyLive.x86_64-linux.config.system.build.vm ``` *Note for the maintainer*: it would be great if you could occasionally run `nix flake update --commit-lock-file`, *especially* after updating github.com/drduh/config.git. Fixes #406 Co-authored-by: Thomas Eizinger <thomas@eizinger.io> | |||||
2023-10-21 | Fix deprecated boot.cleanTmpDir for boot.tmp.cleanOnBoot | West | 1 | -1/+1 | |
2023-10-15 | Update debian version | drduh | 1 | -5/+9 | |
2023-10-15 | Remove ancient keyservers | drduh | 1 | -10/+11 | |
2023-10-14 | fix: use `nix-build` instead of `nix build` | Xandor Schiefer | 1 | -1/+1 | |
`nix build` is a new "Nix command" that is technically still experimental. | |||||
2023-10-14 | fix: update `hopenpgp-tools` in the NixOS build | Xandor Schiefer | 1 | -2/+32 | |
Fixes https://github.com/drduh/YubiKey-Guide/issues/370. | |||||
2023-10-10 | Update rpmsphere version | askiiart | 1 | -1/+1 | |
2023-09-22 | Add link to "makegpg" tool | Alex Hirzel | 1 | -0/+1 | |
2023-08-18 | add note for installing yubikey-manager on Debian 12 | Csanad Beres | 1 | -0/+3 | |
2023-08-18 | add note on installing hopenpgp-tools on Debian 12 | Csanad Beres | 1 | -0/+19 | |
2023-08-14 | fix bad copy paste | Dalibor Karlović | 1 | -1/+1 | |
2023-07-16 | Required Software/NixOS: Replace yubioath-desktop with yubioath-flutter | Federico Damián Schonborn | 1 | -1/+1 | |
Trying to use yubioath-desktop results on this error: yubioath-desktop has been deprecated by upstream in favor of yubioath-flutter On the current stable channel (23.05). Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com> | |||||
2023-06-29 | add missing code-fence language indicators + zap extraneous tabs | Phill Kelley | 1 | -9/+9 | |
Signed-off-by: Phill Kelley <34226495+Paraphraser@users.noreply.github.com> | |||||
2023-06-29 | explain use of card URL field to obtain public key from keyserver | Phill Kelley | 1 | -0/+69 | |
Signed-off-by: Phill Kelley <34226495+Paraphraser@users.noreply.github.com> | |||||
2023-06-28 | 2023-06-28 Add section on setting up multiple hosts | Phill Kelley | 1 | -0/+74 | |
Issue #382 suggests adding a section explaining how to use the same YubiKey on multiple hosts. This PR incorporates most of the suggestions. Fixes: #382 Signed-off-by: Phill Kelley <34226495+Paraphraser@users.noreply.github.com> | |||||
2023-06-26 | fix typo | Dalibor Karlović | 1 | -1/+1 | |
2023-06-26 | fix: add an explicit example about publishing the pubkey when expiring | Dalibor Karlović | 1 | -1/+13 | |
2023-05-15 | Update ykman set-touch instructions | Omar Kotb | 1 | -17/+18 | |
2023-04-15 | Add instructions for adding a new identity | Shane Friedman | 1 | -1/+126 | |
2023-03-31 | Fix typo | Kumiko as a Service | 1 | -2/+2 | |
pegant -> pageant | |||||
2023-03-21 | add polkit rule troubleshooting tip | Tai Groot | 1 | -0/+18 | |
2023-02-16 | Update README.md | Philip May | 1 | -1/+1 | |
2023-02-16 | Update README.md | Philip May | 1 | -1/+1 | |
2022-12-26 | Update toc | drduh | 1 | -55/+57 | |
2022-12-26 | More entropy cleanup, move batch instructions to alt | drduh | 1 | -87/+68 | |
2022-12-26 | Clean up entropy instructions | drduh | 1 | -92/+45 | |
2022-12-26 | Fix spacing | drduh | 1 | -4/+3 | |
2022-12-26 | mention gnupg on tpm | drduh | 1 | -0/+1 | |
2022-12-26 | mention wsl2-ssh-pageant alt | drduh | 1 | -1/+1 | |
2022-12-26 | mention KO attacks | drduh | 1 | -0/+2 | |
2022-12-26 | mention forcesig flag to prompt pin each time | drduh | 1 | -1/+1 | |
2022-12-26 | Note public key recovery article | drduh | 1 | -0/+2 | |
2022-12-26 | safe quote remove-keygrips.sh | drduh | 1 | -4/+4 | |
2022-12-26 | Update admin command order, plink quotes and keytocard note | drduh | 1 | -9/+15 | |
2022-11-21 | reorder cleanup | Steve Thomson | 1 | -2/+2 | |
2022-10-24 | Update README.md | Bartłomiej Jakub Kwiatek | 1 | -1/+1 | |
openpgp set-pin-retries is moved to openpgp access set-retries | |||||
2022-10-03 | feat: offline NixOS LiveCD image | Xandor Schiefer | 1 | -25/+165 | |
Includes inspiration from https://github.com/dhess/nixos-yubikey | |||||
2022-09-12 | Add link to list of PGP-compatible keys | HexPandaa | 1 | -1/+1 | |
2022-09-12 | Mention Bio Series - FIDO Edition | HexPandaa | 1 | -1/+1 | |
Per Yubico's documentation, these do not support OpenPGP: - https://support.yubico.com/hc/en-us/articles/360013790259-Using-Your-YubiKey-with-OpenPGP - https://support.yubico.com/hc/en-us/articles/4407752687378-YubiKey-C-Bio-FIDO-Edition - https://www.yubico.com/fr/store/#yubikey-bio-series-fido-edition | |||||
2022-08-10 | make launchctl commands more copy 'n paste friendly | Felix Kronlage-Dammers | 1 | -2/+2 | |
2022-08-09 | Quick VMware name correction | Franciosi | 1 | -1/+1 | |
s/VMWare/VMware | |||||
2022-06-19 | Update the command to change the pin retry attempts | Douglas Reis | 1 | -1/+1 | |
Signed-off-by: Douglas Reis <doreis@lowrisc.org> | |||||
2022-05-14 | State release date of Yubico press release | David Isaksson | 1 | -1/+1 | |
2022-04-28 | Add Fedora required software section | SeanOMik | 1 | -0/+10 | |
2022-04-25 | Update OneRNG to version 3.7 | Dennis Hoppe | 1 | -5/+4 | |
2022-04-22 | Add explanation of a possible fix for the `signing failed: agent refused ↵ | Peter Engelbert | 1 | -0/+2 | |
operation` error Signed-off-by: Peter Engelbert <pmengelbert@gmail.com> | |||||
2022-04-15 | Add section to quickly create keys | apiraino | 1 | -1/+79 | |
2022-04-12 | reset all changes | apiraino | 1 | -204/+420 | |
2022-04-12 | replace dead link with the web archive | Peter Babič | 1 | -1/+1 | |
2022-04-12 | chore: add piv-agent to Alternatives section | Scott Leggett | 1 | -1/+1 | |