400 Commits (90292fe553871e6e6142419111828d035de4e438)

Author	SHA1	Message	Date
drduh	90292fe553	Update LUKS link, make commands consistent, more passphrase guidance	2 months ago
drduh	5a4884685d	Optional hardening section, additional validation steps	2 months ago
Will Stephenson	953bac8739	Fix typo in date command	2 months ago
drduh	30d5f3905f	Add command-line passphrase template	2 months ago
drduh	7a1039ab08	Replace mkdir commands	2 months ago
drduh	6272fc4181	Install yubikey-manager directly on Debian	2 months ago
drduh	a0fa35cf11	Simplify and automate fdisk commands	2 months ago
drduh	ac8ff82085	Stick with 6/8 digit PINs	2 months ago
drduh	38a6c057aa	Remove obsolete stuff, clean up intro	2 months ago
drduh	228ff7c7ca	Move keyserver instructions to later, more batch commands	2 months ago
drduh	a1081d20ac	Automate PIN and card operations	2 months ago
drduh	b2959d075b	Simplify instructions, reduce manual labor	2 months ago
drduh	12b232d28f	Merge pull request #423 from Xronophobe/fix/quick-add-key-with-fpr ... update gpg --quick-add-key commands	3 months ago
drduh	c1b556c7c5	formatting fix	3 months ago
drduh	f0a0801a51	Workaround for Authenticate key issue	3 months ago
Csanad Beres	623a60cc83	update gpg --quick-add-key commands ... it seems to be only accepting fingerprints and rejecting key ID-s	3 months ago
drduh	07e0fe71fd	few more standard terms	4 months ago
drduh	678e779b1f	typo	4 months ago
drduh	6e19ae4cc4	few more style nits	4 months ago
drduh	29563423c1	explicit keytocard instructions	4 months ago
drduh	0b24d77c18	simplify batch instructions	4 months ago
drduh	ca052604c3	standard names for subkeys	4 months ago
drduh	8e914a3a60	remove yubikey as rng	4 months ago
drduh	d6848d5440	remove multiple hosts	4 months ago
drduh	92d4212019	more grammar	4 months ago
drduh	c69295975c	few more cleanups	4 months ago
drduh	c6052c9028	simplify console output, use generic info	4 months ago
drduh	fbd7008a16	more grammar and formatting	4 months ago
drduh	152f7fb262	grammar and style	4 months ago
drduh	cfe0fa282d	grammar and standardize storage terminology	4 months ago
drduh	24ca007315	standardize Certify/Subkeys, easier command copy, organize links	4 months ago
drduh	c0b4ca6f78	Merge pull request #416 from Paraphraser/20240210-disable-ccid-master ... add step to set `disable-ccid` in `scdaemon.conf`	4 months ago
Phill Kelley	5c3a4e8b18	fix rookie mistake ... Add a one-liner that works. Then think about the context and decide to recommend a rearrangement. And then muck up the consequential adjustment of the original one-liner. I think I got a badge for that in the scouts. Well spotted. Sorry. Signed-off-by: Phill Kelley <34226495+Paraphraser@users.noreply.github.com>	4 months ago
drduh	b2d55a80de	Merge pull request #408 from jpickwell/patch-1 ... Quote Debian Live ISO URL, and add $ to AWK RegExp.	4 months ago
drduh	db9316a8ce	Merge pull request #411 from motiejus/motiejus-flake ... NixOS Live Image: convert to a flake	4 months ago
Phill Kelley	f8fcb0c2d1	add step to set `disable-ccid` in `scdaemon.conf` ... Issue #404 reports "GPG acts like my YubiKey isn't plugged in". With GnuPG 2.3 and later, the system can get into a loop where it prompts for insertion of a YubiKey even though that YubiKey is already connected. The solution for this is to set `disable-ccid` in `~/.gnupg/scdaemon.conf`. Testing suggests setting `disable-ccid` does not interfere with earlier versions of GnuPG (eg 2.2.27 on Debian Bullseye or 2.2.40 on Debian Bookworm). This problem has also been mentioned in #277 and #256. Including a step in the Guide to set `disable-ccid` may help minimise recurrence. Also takes the opportunity to ensure `~/.gnupg` directory exists on a new system before downloading `gpg.conf`. References: * Ludovic Rousseau - [GnuPG and PC/SC conflicts](https://ludovicrousseau.blogspot.com/2019/06/gnupg-and-pcsc-conflicts.html) * GnuPG.org: - [Scdaemon Options](https://www.gnupg.org/documentation/manuals/gnupg/Scdaemon-Options.html#index-disable_002dccid) * YubiCo: - [Resolving GPG's CCID conflicts](https://support.yubico.com/hc/en-us/articles/4819584884124-Resolving-GPG-s-CCID-conflicts) - [Troubleshooting Issues with GPG](https://support.yubico.com/hc/en-us/articles/360013714479-Troubleshooting-Issues-with-GPG) * Closed issues: - [277 pcscd: Error Reader Exclusive](https://github.com/drduh/YubiKey-Guide/issues/277) - [256 Update scdaemon.conf for gnupg 2.3 with MacOS (and possibly others)](https://github.com/drduh/YubiKey-Guide/issues/256) Fixes #404 Signed-off-by: Phill Kelley <34226495+Paraphraser@users.noreply.github.com>	4 months ago
Motiejus Jakštys	84c9d9654d	NixOS Live Image: convert to a flake ... Now `nixpkgs` will be pointing to a specific release, which has a much smaller chance to unexpectedly break. Currently 23.11. The next one will be 24.05, 24.11, etc. NixOS *releases* receive security updates, but packages are upgraded conservatively, thus don't generally break. As a result, we should need to worry about NixOS upgrades every 6-12 months. The upgrade means "bump the version number and try to build it". If it breaks, it will generally break only then. Less reactive, more proactive surprises. `flake.nix` was written by @thomaseizinger in https://github.com/drduh/YubiKey-Guide/issues/406. Changes from the original: - change Gnome to xfce. Now it loads with 384MB of RAM and works well with the simplest graphics (hello qemu). - less nasty workaround for hopenpgp-tools. Fixed upstream (https://github.com/NixOS/nixpkgs/pull/279117). - do not default `copytoram`, user can select this option in the bootloader. Here is how to test it: ``` $ nix run .#nixosConfigurations.yubikeyLive.x86_64-linux.config.system.build.vm ``` *Note for the maintainer*: it would be great if you could occasionally run `nix flake update --commit-lock-file`, *especially* after updating github.com/drduh/config.git. Fixes #406 Co-authored-by: Thomas Eizinger <thomas@eizinger.io>	4 months ago
Colin Grady	80a90f8813	Update link to genuine device check info	4 months ago
Jordan Pickwell	adf11bfdd5	Update README.md ... Quote ISO URL, and add `$` RegExp end-of-string anchor to return only the ISO file and none of the other entries that contain `xfce.iso`. This avoids unnecessary cURL errors.	5 months ago
West	7dedee95e0	Fix deprecated boot.cleanTmpDir for boot.tmp.cleanOnBoot	7 months ago
drduh	f76004cffc	Update debian version	8 months ago
drduh	41f3cce9f0	Remove ancient keyservers	8 months ago
drduh	703c6aa37f	Merge pull request #386 from Xronophobe/docs/update-debian-12-live ... add notes for installing #Required Software on Debian 12	8 months ago
drduh	5d1e524af5	Merge pull request #387 from dkarlovi/patch-1 ... fix: add an explicit example about publishing the pubkey when expiring	8 months ago
drduh	ce29f5db92	Merge pull request #395 from alhirzel/patch-1 ... Add link to "makegpg" tool	8 months ago
drduh	dc201e90cd	Merge pull request #396 from zeorin/fix/nixos ... Fix NixOS LiveCD image build	8 months ago
Xandor Schiefer	687ff41fb0	fix: use `nix-build` instead of `nix build` ... `nix build` is a new "Nix command" that is technically still experimental.	8 months ago
Xandor Schiefer	6c422ee16f	fix: update `hopenpgp-tools` in the NixOS build ... Fixes https://github.com/drduh/YubiKey-Guide/issues/370.	8 months ago
askiiart	1035e1ab39	Update rpmsphere version	8 months ago
Alex Hirzel	3f92a76287	Add link to "makegpg" tool	8 months ago