[prev in list] [next in list] [prev in thread] [next in thread] 

List:       qubes-users
Subject:    [qubes-users] Yubikey LUKS with Qubes?
From:       "'Jeremy Hansen' via qubes-users" <qubes-users () googlegroups ! com>
Date:       2023-01-31 9:24:00
Message-ID: 2d985c80-a4d0-45a6-b0d2-512c62335dfb () Canary
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


I'm trying to figure out the things required to use my Yubikey to decrpyt my LUKS \
root filesystem. As I understand it, dom0 in 4.1.1 doesn't have the functions require \
in cryptsetup. It looks like systemd in Fedora 36 added systemd-cryptenroll, which I \
see in the Fedora guests. Has anyone attempted to get the required utilities to make \
this work in to dom0, which is based on Fedora 32 I believe.

I see Qubes 4.2 is going to base dom0 on Fedora 37, which should have all the tools, \
but I can't seem to find any kind of iso nightly builds for 4.2.

I've worked through getting my Yubikey working for auth, but it would be very nice to \
get the LUKS functionality in there as well.

Thank you
-jeremy

-- 
You received this message because you are subscribed to the Google Groups \
"qubes-users" group. To unsubscribe from this group and stop receiving emails from \
it, send an email to qubes-users+unsubscribe@googlegroups.com. To view this \
discussion on the web visit \
https://groups.google.com/d/msgid/qubes-users/2d985c80-a4d0-45a6-b0d2-512c62335dfb%40Canary.



[Attachment #5 (text/html)]

<html><head> <title></title> <meta name="viewport" content="width=device-width, \
initial-scale=1.0, user-scalable=no"> </head> <body \
style="font-family:Helvetica;color:#000000;font-size:16px;"> <div id="CanaryBody"> \
<div> I'm trying to figure out the things required to use my Yubikey to decrpyt my \
LUKS root filesystem.   As I understand it, dom0 in 4.1.1 doesn't have the functions \
require in cryptsetup.   It looks like systemd in Fedora 36 added \
systemd-cryptenroll, which I see in the Fedora guests.   Has anyone attempted to get \
the required utilities to make this work in to dom0, which is based on Fedora 32 I \
believe.</div><div><br></div><div>I see Qubes 4.2 is going to base dom0 on Fedora 37, \
which should have all the tools, but I can't seem to find any kind of iso nightly \
builds for 4.2.</div><div><br></div><div>I've worked through getting my Yubikey \
working for auth, but it would be very nice to get the LUKS functionality in there as \
well.</div><div><br></div><div>Thank you</div><div>-jeremy</div><div><br></div> \
<div><br></div> </div> <div id="CanarySig"> <div> <div \
style="font-family:Helvetica;"><br></div> <div><br></div> </div> </div> <div \
id="CanaryDropbox"> </div> </body></html>

<p></p>

-- <br />
You received this message because you are subscribed to the Google Groups \
&quot;qubes-users&quot; group.<br /> To unsubscribe from this group and stop \
receiving emails from it, send an email to <a \
href="mailto:qubes-users+unsubscribe@googlegroups.com">qubes-users+unsubscribe@googlegroups.com</a>.<br \
/> To view this discussion on the web visit <a \
href="https://groups.google.com/d/msgid/qubes-users/2d985c80-a4d0-45a6-b0d2-512c62335d \
fb%40Canary?utm_medium=email&utm_source=footer">https://groups.google.com/d/msgid/qubes-users/2d985c80-a4d0-45a6-b0d2-512c62335dfb%40Canary</a>.<br \
/>


["signature.asc" (application/pgp-signature)]

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic