Benn

Glad you found the culprit! Some comments on this, from top to bottom of your post: * You should NEVER do an rpi-update unless you know what you're doing, and...

I tried the encryption process this morning with a Pi5 and 16Kb pages (ie NO kernel=kernel8.img) and it worked fine. I don't know what changed, but since all of my...

> Wonderful! Thank you for the update! > > I am planning to give your tool a go to customize an image and then I'll redeploy and see how it...

I spent some time looking at yubikey support. It turns out that it's pretty easy to manually add it to an already-encrypted rootfs. I'd really appreciate it if you would...

Hmm...more futzing. If you give it a try, set up a scratch system, IE something you don't care about. There's something not quite right, although it does work if I...

> I haven't done anything meaningful yet with the 500+ so I will tool around with that haha. > > I skimmed through your previous post just now and I'll...

I now have the challenge-response (aka "type") working. I'm building a plugin that one would run on the booted system AFTER sdm-cryptconfig has completed to configure this. I also spent...

> Yes! I meant to test a couple days ago but alas, work got in the way haha. > > Tonight or tomorrow are blissfully free so I want to...

OK, first version for testing. Drop the unzipped plugin into /usr/local/sdm/plugins The yubi plugin configures an already-encrypted rootfs to be unlocked with a Yubikey in addition to the rootfs passphrase....

> A couple things I notice from https://developers.yubico.com/yubikey-personalization/ : > > > We have officially announced the End of Life of the YubiKey Personalization package on February 19, 2025, in...