Skip to content
This repository has been archived by the owner on Mar 1, 2018. It is now read-only.

Combine with SSH encrypt #4

Open
th3voic3 opened this issue Dec 13, 2017 · 2 comments
Open

Combine with SSH encrypt #4

th3voic3 opened this issue Dec 13, 2017 · 2 comments

Comments

@th3voic3
Copy link

Hi,

I'm currently using the hook provided here: https://github.com/grazzolini/mkinitcpio-utils
on my desktop PC.
I'm now using your hook on my laptop and I'm quite happy with it.
I looked into it a little but can't quite figure it out.
Would it be possible to combine both hooks for my desktop PC?
The idea then would be:

  1. Check if Yubikey is plugged in and if so provide PIN prompt
  2. If Yubikey is not plugged in fallback to passphrase prompt that is then accessible via SSH

I'm sure this is doable but I haven't quite figured out how. Can you help me?

@xdbob
Copy link
Owner

xdbob commented Dec 19, 2017

Hi,

I've just looked at mkinitcpio-utils and the gpg-encrypt hook will not allow you to do what you wish but you may have more luck with my newer hook mkinitcpio-gnupg which as no direct relation with the encrypt hook and will only unlock files on the initramfs for use in later hooks

Good luck and keep me posted, I am willing to add some support if needed (and if it is not some big ugly hack)

@th3voic3
Copy link
Author

Hi again,

so I played around with the mkinitcpio-gnupg hook and while it does work fine with the encrypt hook it doesn't work with the encryptssh hook. It comes up with the "cannot open keyfile" message. Not sure why that is.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants