drduh/YubiKey-Guide

Stale references to nix + other issues

Open

#498 aberto em 5 de mai. de 2025

Ver no GitHub
 (6 comments) (1 reaction) (0 assignees)HTML (1.249 forks)batch import
help wanted

Métricas do repositório

Stars
 (12.308 stars)
Métricas de merge de PR
 (Nenhuma PRs mesclada em 30d)

Description

Here are a couple of issues with the nix component of this guide:

  1. The Build an air-gapped NixOS LiveCD image part of the guide no longer works after moving flake.nix to nix subdirectory. Similar issue with the other commands. Adding ?dir=nix argument to the flake url should solve the problem.
  2. The flake lock file is outdated: it contains drduhConfig which was removed from the flake inputs.

And other issues noticed while following it:

  1. sudo mkdir /mnt/encrypted-storage does not work on NixOS as /mnt is not created by default.
  2. gpg-agent needs to be stopped before using ykman openpgp commands.
  3. Transfer subkeys just doesn't work (gpg: KEYTOCARD failed: Invalid time error). What solved was to run the interactive command manually without --pinentry-mode=loopback
  4. Running save after keytocard makes it annoying to transfer the keys to multiple yubikeys, as they are removed from gnupg. I had to delete all secret keys form my gnupg and re-import the backups. It seems to me like the live NixOS image support is slowly being faded out. Is there a particular reason for this?

Anyways, this was a great guide, thank you to all who contributed to it!

Guia do colaborador

Direção de pesquisa
Atualize as URLs do flake adicionando ?dir=nix. Remova a entrada drduhConfig do arquivo de bloqueio. Teste a transferência de chaves GPG sem pinentry mode=loopback e adicione uma etapa para criar /mnt, se necessário.
Pilha de tecnologia
shell
Domain
securitydocumentation
Tipo Issue
Documentação
DifficultyDificuldade de implementação estimada para um novo contribuidor, de 1 para alterações muito pequenas a 5 para trabalho de nível especializado.
3
Tempo estimadoUm intervalo de tempo aproximado para um colaborador experiente investigar, implementar, testar e preparar um pull request.
1-2 dias
Status da atividadeQuão disponível o issue aparece agora: novo, ativo, obsoleto, bloqueado ou aguardando entrada do mantenedor.
Ativo
ClarityCom que clareza o issue explica a mudança esperada, os critérios de aceitação e a próxima etapa.
Claro
Prerequisites
GitGPG
Simpatia para novatosUma pontuação de 1 a 100 que estima o quão acessível este issue é para colaboradores iniciantes.
70