yubikey-luks icon indicating copy to clipboard operation
yubikey-luks copied to clipboard

yubikey-luks initramfs unlock script does not work on Ubuntu 24.04 LTS

Open random578036896547 opened this issue 8 months ago • 7 comments

Hi, on clean new installation of Ubuntu 24.04 yubikey-luks initramfs unlock script does not work.

after insatlation (sudo apt-get install yubikey-luks -y) I am able to enroll keys in key slots. (both for default system partition (/dev/nvme0n1p3), and for external USB pen drive I used for test /dev/sda3). with yubikey-luks-enroll. I am able to use yubikey-luks-open for external pendrive (/dev/sda3) I used for testing. So making key slots and using chalange-responses from yubi keys works. However after reboot of system OS in LUKS unlock screen, no yubikey-luks welcome text is shown and unlock for keyslots containing enrolled keys are not working. Only those I made with luksAddKeys and therefore with passwords only are working. I am using same laptop as for previous 18.04-23.10 where everything worked ok. (Dell XPS 13 9350) Did not work first time (depending on automaticall add keyscript to crypttab - that worked for me before) Did not work after manual sudo update-initramfs -u Did not work after adding to /etc/crypttab cryptroot /dev/nvme0n1p3 none luks,keyscript=/usr/share/yubikey-luks/ykluks-keyscript and doing sudo update-initramfs -u again. Both yubikeys NFC5c I have are initialized for ch-response (ykpersonalize -2 -ochal-resp -ochal-hmac -ohmac-lt64 -oserial-api-visible) Thanks in advance for any advice, thx.

random578036896547 avatar Jun 19 '24 07:06 random578036896547