yubikey-full-disk-encryption
yubikey-full-disk-encryption copied to clipboard
Add support for yubikey-manager
Because yubikey-personalization is not under active development, I add support for yubikey-manager. It works fine on my machine for format, enroll and open. I did not test NFC because I do not have NFC machine. For hooks, I added ykman and od, it should work. README should be modified if this commit is approved.
As discussed in the issue ykman isn't drop-in replacement for yubikey-personalization so this is incompatible change
My patch is compatible with previous version. You can use it with your old challenge. You should read my patch again.
I added new commit to address those issue. Please test it
There is problem on hooks, I will look at tomorrow. Python is dificult to add library.
Yes yubikey-manager has a lot of python deps. Adding them to initramfs would be a challenge.
We have few options:
- pack ykmanager as ELF binary, it would increase initramfs's size. I don't prefer this way.
- write custom script to find deps and add it to initramfs, but it's hard to maintain because we're not sure deps change in the future and break our package. It needs to regenerate every time when yubikey-manager has been released. I will read otp code and find package it used, not all packages.
I tested with pyinstaller successfully, but the initramfs's zise is around 50Mb if we find all python's libraries, we need some .so files. I have an idea, unpack pyinstaller's output and add those files which in plain text.
I added new commit, please check it, it works with hooks on my machine.
Can you please squash the commits that are iterative and update the git log to help review?
I squashed commit, please review it.