Vincent43

EFI partition can be mounted as /boot however you need to have enough free space to install all kernels and initramfs there. How much of free space do you have...

Files stored on EFI boot partition are essential for booting the system so shouldn't delete them. When you mount EFI partition on /boot then it will need to contain all...

Systemd added native [suppport for unlocking luks with smartcard](https://github.com/systemd/systemd/pull/14267) which I guess would obsolete other alternatives in future.

Note that systemd gained native support for unlocking [LUKS with smartcards](http://0pointer.net/blog/unlocking-luks2-volumes-with-tpm2-fido2-pkcs11-security-hardware-on-systemd-248.html) and more.

systemd-boot is bootloader (like grub) the link above is about using system in initramfs which happens post bootloader phase.

This was reported [here](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012089). Ubuntu/Debian packages are maintained by different person than this project.

Hi, I agree this situation isn't perfect but see my comment from mentioned thread: > You have to choose which mode you want to use in /etc/ykfde.conf in order to...

I didn't mean fallback to 1FA mode, I meant fallback to using normal (not yubikey related) password for unlocking disk like with `encrypt` hook.

I'm bit skeptical about adding this as it may be too uncommon usecase while I'm trying to limit number of settings in order to make code simpler. Do you ever...

I think what's uncommon in your setup is not multiple drives used but the fact that OS data is unencrypted which doesn't follow _Full disk encryption_ concept for which this...