summaryrefslogtreecommitdiffstats
path: root/conf/ykfde.conf
diff options
context:
space:
mode:
authorGravatar Christian Hesse <mail@eworm.de>2014-12-22 22:03:21 +0100
committerGravatar Christian Hesse <mail@eworm.de>2014-12-22 23:20:10 +0100
commit0498dd512161b7fb07e703e03bc9b8ca8b3dd400 (patch)
tree0ced97f5e7015af52d712c53cf312adfa6c2dfa7 /conf/ykfde.conf
parentebcce373b196cd4ad44667a05c856ed0f4b472b5 (diff)
downloadmkinitcpio-ykfde-0498dd512161b7fb07e703e03bc9b8ca8b3dd400.tar.gz
mkinitcpio-ykfde-0498dd512161b7fb07e703e03bc9b8ca8b3dd400.tar.zst
replace shell script with C code, and many more
* place bin/ykfde with C source code bin/ykfde.c * challenge/response can be updated in place WARNING: This required config file syntax change! * updates and simplification to udev/ykfde * a lot more... Signed-off-by: Christian Hesse <mail@eworm.de>
Diffstat (limited to 'conf/ykfde.conf')
-rw-r--r--conf/ykfde.conf20
1 files changed, 16 insertions, 4 deletions
diff --git a/conf/ykfde.conf b/conf/ykfde.conf
index af25ad7..0525053 100644
--- a/conf/ykfde.conf
+++ b/conf/ykfde.conf
@@ -1,8 +1,20 @@
[general]
-# Specify what Yubikey slot to use for full disk encryption
+# Specify what Yubikey slot to use for full disk encryption.
+# This is just the system default, you can configure one or more
+# Yubikeys below.
# The specified slot has to be configured for HMAC-SHA1.
-slot = 2
+yk slot = 2
-# you can specify slot for one or more specific Yubikeys as well
+# This is the LUKS device. Make sure you use the name, not
+# block device, e.g. it has to match first column of
+# /etc/crypttab.initramfs.
+device name = crypt
+
+# For every Yubikey in use add a section here.
+# * 'yk slot' is optional and only required for keys differing
+# from system default.
+# * 'luks slot' is required to make sure one Yukikey is associated
+# with exactly one LUKS slot!
#[1234567]
-#slot = 1
+#yk slot = 1
+#luks slot = 1