aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/README.md (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* few more cleanupsdrduh2024-02-111-42/+112
|
* simplify console output, use generic infodrduh2024-02-111-477/+203
|
* more grammar and formattingdrduh2024-02-111-127/+118
|
* grammar and styledrduh2024-02-111-195/+149
|
* grammar and standardize storage terminologydrduh2024-02-111-141/+156
|
* standardize Certify/Subkeys, easier command copy, organize linksdrduh2024-02-111-424/+409
|
* Merge pull request #416 from Paraphraser/20240210-disable-ccid-masterdrduh2024-02-111-1/+21
|\ | | | | add step to set `disable-ccid` in `scdaemon.conf`
| * fix rookie mistakePhill Kelley2024-02-111-1/+1
| | | | | | | | | | | | | | | | | | | | Add a one-liner that works. Then think about the context and decide to recommend a rearrangement. And then muck up the consequential adjustment of the original one-liner. I think I got a badge for that in the scouts. Well spotted. Sorry. Signed-off-by: Phill Kelley <34226495+Paraphraser@users.noreply.github.com>
| * add step to set `disable-ccid` in `scdaemon.conf`Phill Kelley2024-02-101-1/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Issue #404 reports "GPG acts like my YubiKey isn't plugged in". With GnuPG 2.3 and later, the system can get into a loop where it prompts for insertion of a YubiKey even though that YubiKey is already connected. The solution for this is to set `disable-ccid` in `~/.gnupg/scdaemon.conf`. Testing suggests setting `disable-ccid` does not interfere with earlier versions of GnuPG (eg 2.2.27 on Debian Bullseye or 2.2.40 on Debian Bookworm). This problem has also been mentioned in #277 and #256. Including a step in the Guide to set `disable-ccid` may help minimise recurrence. Also takes the opportunity to ensure `~/.gnupg` directory exists on a new system before downloading `gpg.conf`. References: * Ludovic Rousseau - [GnuPG and PC/SC conflicts](https://ludovicrousseau.blogspot.com/2019/06/gnupg-and-pcsc-conflicts.html) * GnuPG.org: - [Scdaemon Options](https://www.gnupg.org/documentation/manuals/gnupg/Scdaemon-Options.html#index-disable_002dccid) * YubiCo: - [Resolving GPG's CCID conflicts](https://support.yubico.com/hc/en-us/articles/4819584884124-Resolving-GPG-s-CCID-conflicts) - [Troubleshooting Issues with GPG](https://support.yubico.com/hc/en-us/articles/360013714479-Troubleshooting-Issues-with-GPG) * Closed issues: - [277 pcscd: Error Reader Exclusive](https://github.com/drduh/YubiKey-Guide/issues/277) - [256 Update scdaemon.conf for gnupg 2.3 with MacOS (and possibly others)](https://github.com/drduh/YubiKey-Guide/issues/256) Fixes #404 Signed-off-by: Phill Kelley <34226495+Paraphraser@users.noreply.github.com>
* | Merge pull request #408 from jpickwell/patch-1drduh2024-02-101-3/+3
|\ \ | | | | | | Quote Debian Live ISO URL, and add $ to AWK RegExp.
| * | Update README.mdJordan Pickwell2024-01-041-3/+3
| |/ | | | | | | | | Quote ISO URL, and add `$` RegExp end-of-string anchor to return only the ISO file and none of the other entries that contain `xfce.iso`. This avoids unnecessary cURL errors.
* | Merge pull request #411 from motiejus/motiejus-flakedrduh2024-02-101-208/+21
|\ \ | | | | | | NixOS Live Image: convert to a flake
| * | NixOS Live Image: convert to a flakeMotiejus Jakštys2024-02-041-208/+21
| |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Now `nixpkgs` will be pointing to a specific release, which has a much smaller chance to unexpectedly break. Currently 23.11. The next one will be 24.05, 24.11, etc. NixOS *releases* receive security updates, but packages are upgraded conservatively, thus don't generally break. As a result, we should need to worry about NixOS upgrades every 6-12 months. The upgrade means "bump the version number and try to build it". If it breaks, it will generally break only then. Less reactive, more proactive surprises. `flake.nix` was written by @thomaseizinger in https://github.com/drduh/YubiKey-Guide/issues/406. Changes from the original: - change Gnome to xfce. Now it loads with 384MB of RAM and works well with the simplest graphics (hello qemu). - less nasty workaround for hopenpgp-tools. Fixed upstream (https://github.com/NixOS/nixpkgs/pull/279117). - do not default `copytoram`, user can select this option in the bootloader. Here is how to test it: ``` $ nix run .#nixosConfigurations.yubikeyLive.x86_64-linux.config.system.build.vm ``` *Note for the maintainer*: it would be great if you could occasionally run `nix flake update --commit-lock-file`, *especially* after updating github.com/drduh/config.git. Fixes #406 Co-authored-by: Thomas Eizinger <thomas@eizinger.io>
* / Update link to genuine device check infoColin Grady2024-01-251-1/+1
|/
* Fix deprecated boot.cleanTmpDir for boot.tmp.cleanOnBootWest2023-10-211-1/+1
|
* Update debian versiondrduh2023-10-151-5/+9
|
* Remove ancient keyserversdrduh2023-10-151-10/+11
|
* Merge pull request #386 from Xronophobe/docs/update-debian-12-livedrduh2023-10-151-0/+22
|\ | | | | add notes for installing #Required Software on Debian 12
| * add note for installing yubikey-manager on Debian 12Csanad Beres2023-08-181-0/+3
| |
| * add note on installing hopenpgp-tools on Debian 12Csanad Beres2023-08-181-0/+19
| |
* | Merge pull request #387 from dkarlovi/patch-1drduh2023-10-151-1/+13
|\ \ | | | | | | fix: add an explicit example about publishing the pubkey when expiring
| * | fix bad copy pasteDalibor Karlović2023-08-141-1/+1
| | |
| * | fix typoDalibor Karlović2023-06-261-1/+1
| | |
| * | fix: add an explicit example about publishing the pubkey when expiringDalibor Karlović2023-06-261-1/+13
| |/
* | Merge pull request #395 from alhirzel/patch-1drduh2023-10-151-0/+1
|\ \ | | | | | | Add link to "makegpg" tool
| * | Add link to "makegpg" toolAlex Hirzel2023-09-221-0/+1
| | |
* | | Merge pull request #396 from zeorin/fix/nixosdrduh2023-10-151-3/+33
|\ \ \ | | | | | | | | Fix NixOS LiveCD image build
| * | | fix: use `nix-build` instead of `nix build`Xandor Schiefer2023-10-141-1/+1
| | | | | | | | | | | | | | | | `nix build` is a new "Nix command" that is technically still experimental.
| * | | fix: update `hopenpgp-tools` in the NixOS buildXandor Schiefer2023-10-141-2/+32
| |/ / | | | | | | | | | Fixes https://github.com/drduh/YubiKey-Guide/issues/370.
* / / Update rpmsphere versionaskiiart2023-10-101-1/+1
|/ /
* | Merge pull request #391 from FedericoSchonborn/masterdrduh2023-08-131-1/+1
|\ \ | | | | | | Required Software/NixOS: Replace yubioath-desktop with yubioath-flutter
| * | Required Software/NixOS: Replace yubioath-desktop with yubioath-flutterFederico Damián Schonborn2023-07-161-1/+1
| |/ | | | | | | | | | | | | | | | | | | Trying to use yubioath-desktop results on this error: yubioath-desktop has been deprecated by upstream in favor of yubioath-flutter On the current stable channel (23.05). Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
* | Merge pull request #388 from Paraphraser/20230628-multiple-hosts-masterdrduh2023-08-131-0/+143
|\ \ | | | | | | 2023-06-28 Add section on setting up multiple hosts
| * | add missing code-fence language indicators + zap extraneous tabsPhill Kelley2023-06-291-9/+9
| | | | | | | | | | | | Signed-off-by: Phill Kelley <34226495+Paraphraser@users.noreply.github.com>
| * | explain use of card URL field to obtain public key from keyserverPhill Kelley2023-06-291-0/+69
| | | | | | | | | | | | Signed-off-by: Phill Kelley <34226495+Paraphraser@users.noreply.github.com>
| * | 2023-06-28 Add section on setting up multiple hostsPhill Kelley2023-06-281-0/+74
| |/ | | | | | | | | | | | | | | | | | | | | Issue #382 suggests adding a section explaining how to use the same YubiKey on multiple hosts. This PR incorporates most of the suggestions. Fixes: #382 Signed-off-by: Phill Kelley <34226495+Paraphraser@users.noreply.github.com>
* | Merge pull request #383 from o-kotb/masterdrduh2023-08-131-17/+18
|\ \ | | | | | | Update ykman set-touch instructions
| * | Update ykman set-touch instructionsOmar Kotb2023-05-151-17/+18
| |/
* | Merge pull request #380 from smoores-dev/adduiddrduh2023-08-131-1/+126
|\ \ | | | | | | Add instructions for adding a new identity
| * | Add instructions for adding a new identityShane Friedman2023-04-151-1/+126
| |/
* | Merge pull request #379 from Dreista/patch-1drduh2023-08-131-2/+2
|\ \ | | | | | | Fix typo
| * | Fix typoKumiko as a Service2023-03-311-2/+2
| |/ | | | | pegant -> pageant
* / add polkit rule troubleshooting tipTai Groot2023-03-211-0/+18
|/
* Merge pull request #372 from PhilipMay/patch-2drduh2023-03-191-1/+1
|\ | | | | Mac command to activate change for pinentry.
| * Update README.mdPhilip May2023-02-161-1/+1
| |
* | Update README.mdPhilip May2023-02-161-1/+1
|/
* Update tocdrduh2022-12-261-55/+57
|
* More entropy cleanup, move batch instructions to altdrduh2022-12-261-87/+68
|
* Clean up entropy instructionsdrduh2022-12-261-92/+45
|
* Fix spacingdrduh2022-12-261-4/+3
|
generated by cgit, for Dennis Eriksen