Vincent43

Results 80 comments of Vincent43

No, if the service is fixed then it's not pointless.

Hi, currently there is no option for auto-skip unlock. I think It was generally assumed that the root partition is locked so unlocking it isn't optional which isn't the case...

There are no any plans currently. I'm just throwing ideas about possible improvements. Personally I would do simple script without dependencies for better portability - one script is all you...

Our runtime scripts work just fine on debian but until we add initramfs script it's not possible to unlock device on boot which limits usefulness of this project for potential...

@crispy-landslide thx for working on this! Separating Archlinux/Debian files is good idea. I think we should use _archlinux_ instead of _arch_ for better clarity (arch often stands for hardware _architecture_)....

Take your time, we can wait 😄

For `/etc/crypttab` support and decrypting multiple devices we would need to add [systemd compatible](https://github.com/agherzan/yubikey-full-disk-encryption/issues/14) hook.

Alternatively you can try to copy `ykfde` hook as `ykfde-home` and add both to mkinitcpio then adjust `YKFDE_LUKS_DEV, YKFDE_DISK_UUID, YKFDE_LUKS_NAME, YKFDE_CHALLENGE, YKFDE_CHALLENGE_PASSWORD_NEEDED` by appending suffix `-HOME` to them inside `ykfde-home`...

There is no easy way to achieve that. One option is to write systemd-compatible hook, the other add something like [decrypt_keyctl](https://github.com/gebi/keyctl_keyscript/blob/master/decrypt_keyctl) script.

Yes, this functionality requires multi protocol YubiKey (v4 or v5). Security key won't work.