Re: Guix home, guix system, channels, some noob questions

[Dominic Martinez]

sebastien rey-coyrehourcq <sebastien.rey-coyrehou...@univ-rouen.fr> writes:

Hi,

I jump into guile world by learning and copy/pasting Dominic Martinez config :)

Nice to know my config helped someone! Sorry it's a bit of a mess, I didn't really document anything.

Everything going pretty well but now i'm blocked with yubikey configuration.

little complicated ...


that's all,
other command don't work, for example both :

gpg --list-secret-keys
gpg --list-keys

And without yubikey that contain your only private key to sign/decrypt everything, that's a Running "gpg --card-status" my yubikey is correclty detected. That a good news ... BUT

When you say it doesn't work, do you mean it doesn't list any keys? If you have keys on your Yubikey that you used with GPG on a different system, you'll have to re-export the key stubs for GPG to use the Yubikey for authentication (see https://github.com/drduh/YubiKey-Guide#switching-between-two-or-more-yubikeys).

If you're getting other errors, you might need to enable some system services. For instance, you need the pcscd service (https://guix.gnu.org/manual/devel/en/guix.html#index-pcscd), and also the udev rules appropriate for your Yubikey model (https://github.com/Yubico/libfido2/blob/main/udev/70-u2f.rules). The below snippet should get all Yubikey functionality working:

#+begin_src scheme
(service pcscd-service-type)
(udev-rules-service 'yubikey-rules
                    (udev-rule
                     "70-u2f.rules"
                     (string-append
                      ;; All keys

                      ;; Yubikey
                      "KERNEL==\"hidraw*\", "
                      "SUBSYSTEM==\"hidraw\", "
                      "ATTRS{idVendor}==\"1050\", "

                      "TAG+=\"uaccess\", MODE=\"0660\"\n"
                      ;; End all keys
                      "LABEL=\"u2f_end\"")))
#+end_src

"ACTION!=\"add|change\", GOTO=\"u2f_end\"\n" "ATTRS{idProduct}==\"0113|0114|0115|0116|0120|0121|0200|0402|0403|0406|0407|0410\", "

signature.asc
Description: PGP signature