aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/README.md (unfollow)
Commit message (Collapse)AuthorFilesLines
2024-03-29Tidy style and formattingdrduh1-15/+14
2024-03-25Fix broken 'SSH agent forwarding' internal linksWill Stephenson1-3/+3
2024-03-24Remove NEO (discontinued in 2018), sort troubleshootingdrduh1-9/+7
2024-03-24Update LUKS link, make commands consistent, more passphrase guidancedrduh1-49/+67
2024-03-24Optional hardening section, additional validation stepsdrduh1-159/+160
2024-03-19Fix typo in date commandWill Stephenson1-1/+1
2024-03-17Add command-line passphrase templatedrduh1-1/+9
2024-03-17Replace mkdir commandsdrduh1-1/+17
2024-03-17Install yubikey-manager directly on Debiandrduh1-39/+5
2024-03-17Simplify and automate fdisk commandsdrduh1-112/+92
2024-03-17Stick with 6/8 digit PINsdrduh1-17/+12
2024-03-17Remove obsolete stuff, clean up introdrduh1-19/+11
2024-03-17Move keyserver instructions to later, more batch commandsdrduh1-82/+74
2024-03-16Automate PIN and card operationsdrduh1-120/+88
2024-03-16Simplify instructions, reduce manual labordrduh1-1137/+548
2024-03-10formatting fixdrduh1-2/+2
2024-03-10Workaround for Authenticate key issuedrduh1-8/+8
2024-03-07update gpg --quick-add-key commandsCsanad Beres1-4/+5
it seems to be only accepting fingerprints and rejecting key ID-s
2024-02-12few more standard termsdrduh1-5/+5
2024-02-12typodrduh1-1/+1
2024-02-12few more style nitsdrduh1-15/+9
2024-02-12explicit keytocard instructionsdrduh1-34/+13
2024-02-12simplify batch instructionsdrduh1-30/+12
2024-02-12standard names for subkeysdrduh1-51/+56
2024-02-12remove yubikey as rngdrduh1-11/+0
2024-02-12remove multiple hostsdrduh1-102/+39
2024-02-11more grammardrduh1-45/+19
2024-02-11few more cleanupsdrduh1-42/+112
2024-02-11simplify console output, use generic infodrduh1-477/+203
2024-02-11more grammar and formattingdrduh1-127/+118
2024-02-11grammar and styledrduh1-195/+149
2024-02-11grammar and standardize storage terminologydrduh1-141/+156
2024-02-11standardize Certify/Subkeys, easier command copy, organize linksdrduh1-424/+409
2024-02-11fix rookie mistakePhill Kelley1-1/+1
Add a one-liner that works. Then think about the context and decide to recommend a rearrangement. And then muck up the consequential adjustment of the original one-liner. I think I got a badge for that in the scouts. Well spotted. Sorry. Signed-off-by: Phill Kelley <34226495+Paraphraser@users.noreply.github.com>
2024-02-10add step to set `disable-ccid` in `scdaemon.conf`Phill Kelley1-1/+21
Issue #404 reports "GPG acts like my YubiKey isn't plugged in". With GnuPG 2.3 and later, the system can get into a loop where it prompts for insertion of a YubiKey even though that YubiKey is already connected. The solution for this is to set `disable-ccid` in `~/.gnupg/scdaemon.conf`. Testing suggests setting `disable-ccid` does not interfere with earlier versions of GnuPG (eg 2.2.27 on Debian Bullseye or 2.2.40 on Debian Bookworm). This problem has also been mentioned in #277 and #256. Including a step in the Guide to set `disable-ccid` may help minimise recurrence. Also takes the opportunity to ensure `~/.gnupg` directory exists on a new system before downloading `gpg.conf`. References: * Ludovic Rousseau - [GnuPG and PC/SC conflicts](https://ludovicrousseau.blogspot.com/2019/06/gnupg-and-pcsc-conflicts.html) * GnuPG.org: - [Scdaemon Options](https://www.gnupg.org/documentation/manuals/gnupg/Scdaemon-Options.html#index-disable_002dccid) * YubiCo: - [Resolving GPG's CCID conflicts](https://support.yubico.com/hc/en-us/articles/4819584884124-Resolving-GPG-s-CCID-conflicts) - [Troubleshooting Issues with GPG](https://support.yubico.com/hc/en-us/articles/360013714479-Troubleshooting-Issues-with-GPG) * Closed issues: - [277 pcscd: Error Reader Exclusive](https://github.com/drduh/YubiKey-Guide/issues/277) - [256 Update scdaemon.conf for gnupg 2.3 with MacOS (and possibly others)](https://github.com/drduh/YubiKey-Guide/issues/256) Fixes #404 Signed-off-by: Phill Kelley <34226495+Paraphraser@users.noreply.github.com>
2024-02-04NixOS Live Image: convert to a flakeMotiejus Jakštys1-208/+21
Now `nixpkgs` will be pointing to a specific release, which has a much smaller chance to unexpectedly break. Currently 23.11. The next one will be 24.05, 24.11, etc. NixOS *releases* receive security updates, but packages are upgraded conservatively, thus don't generally break. As a result, we should need to worry about NixOS upgrades every 6-12 months. The upgrade means "bump the version number and try to build it". If it breaks, it will generally break only then. Less reactive, more proactive surprises. `flake.nix` was written by @thomaseizinger in https://github.com/drduh/YubiKey-Guide/issues/406. Changes from the original: - change Gnome to xfce. Now it loads with 384MB of RAM and works well with the simplest graphics (hello qemu). - less nasty workaround for hopenpgp-tools. Fixed upstream (https://github.com/NixOS/nixpkgs/pull/279117). - do not default `copytoram`, user can select this option in the bootloader. Here is how to test it: ``` $ nix run .#nixosConfigurations.yubikeyLive.x86_64-linux.config.system.build.vm ``` *Note for the maintainer*: it would be great if you could occasionally run `nix flake update --commit-lock-file`, *especially* after updating github.com/drduh/config.git. Fixes #406 Co-authored-by: Thomas Eizinger <thomas@eizinger.io>
2024-01-25Update link to genuine device check infoColin Grady1-1/+1
2024-01-04Update README.mdJordan Pickwell1-3/+3
Quote ISO URL, and add `$` RegExp end-of-string anchor to return only the ISO file and none of the other entries that contain `xfce.iso`. This avoids unnecessary cURL errors.
2023-10-21Fix deprecated boot.cleanTmpDir for boot.tmp.cleanOnBootWest1-1/+1
2023-10-15Update debian versiondrduh1-5/+9
2023-10-15Remove ancient keyserversdrduh1-10/+11
2023-10-14fix: use `nix-build` instead of `nix build`Xandor Schiefer1-1/+1
`nix build` is a new "Nix command" that is technically still experimental.
2023-10-14fix: update `hopenpgp-tools` in the NixOS buildXandor Schiefer1-2/+32
Fixes https://github.com/drduh/YubiKey-Guide/issues/370.
2023-10-10Update rpmsphere versionaskiiart1-1/+1
2023-09-22Add link to "makegpg" toolAlex Hirzel1-0/+1
2023-08-18add note for installing yubikey-manager on Debian 12Csanad Beres1-0/+3
2023-08-18add note on installing hopenpgp-tools on Debian 12Csanad Beres1-0/+19
2023-08-14fix bad copy pasteDalibor Karlović1-1/+1
2023-07-16Required Software/NixOS: Replace yubioath-desktop with yubioath-flutterFederico Damián Schonborn1-1/+1
Trying to use yubioath-desktop results on this error: yubioath-desktop has been deprecated by upstream in favor of yubioath-flutter On the current stable channel (23.05). Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
2023-06-29add missing code-fence language indicators + zap extraneous tabsPhill Kelley1-9/+9
Signed-off-by: Phill Kelley <34226495+Paraphraser@users.noreply.github.com>
generated by cgit, for Dennis Eriksen