| 25 Oct 2022 |
@kranzes:matrix.org | In reply to @elvishjerricco:matrix.org would not recommend Why not? | 11:24:18 |
@kranzes:matrix.org | * I wanted to add my backup FIDO2 but it asks for password even though I deleted it already. I would expect it to try to do it via the other FIDO2 slot still available... | 11:25:01 |
@elvishjerricco:matrix.org | your data should not be beholden to any one thing. So having a backup passphrase lets you recover in the event that all else fails | 11:25:18 |
@kranzes:matrix.org | but it's not one thing | 11:25:42 |
@kranzes:matrix.org | it's two things | 11:25:44 |
@kranzes:matrix.org | i wanted to add multiple FIDO2 keys | 11:25:48 |
@elvishjerricco:matrix.org | i mena | 11:26:04 |
@elvishjerricco:matrix.org | * i mean | 11:26:08 |
@elvishjerricco:matrix.org | there is one device | 11:26:17 |
@kranzes:matrix.org | no | 11:26:21 |
@kranzes:matrix.org | multiple | 11:26:23 |
@elvishjerricco:matrix.org | and once lost, so is all else | 11:26:24 |
@kranzes:matrix.org | I have multiple yubikeys | 11:26:34 |
@kranzes:matrix.org | and nitrokey | 11:26:36 |
@kranzes:matrix.org | stored in a safe and one that i take with me everywhere | 11:26:56 |
@kranzes:matrix.org | i wanted to enroll the backup ones | 11:27:01 |
@elvishjerricco:matrix.org | hm. Ok, so maybe I have some learning to do | 11:27:08 |
@kranzes:matrix.org | I am still able to unlock the device, but not enroll more slots | 11:27:38 |
@kranzes:matrix.org | as that asks me for a password which i no longer have | 11:27:49 |
@kranzes:matrix.org | I might have to create an issue somewhere | 11:28:35 |
@kranzes:matrix.org | How would I go about doing that? | 11:28:45 |
@kranzes:matrix.org | https://github.com/systemd/systemd/issues?q=cryptenroll | 11:29:33 |
@kranzes:matrix.org | oh they use github? | 11:29:36 |
@kranzes:matrix.org | https://github.com/systemd/systemd/issues/25128 | 12:35:42 |
| 30 Oct 2022 |
| Claes joined the room. | 04:56:20 |
| 31 Oct 2022 |
@oxalica:matrix.org | https://github.com/NixOS/nixpkgs/blob/00bde1ac69b572f56ca461a76d8f1db59b29da0f/nixos/modules/services/hardware/udev.nix#L13
Is there a reason why not all upstream udev rules are included? Some rules seems important, like btrfs and vconsole | 16:55:16 |
@oxalica:matrix.org | Also I found that systemd udev rules is even not in stage 2 (services.udev.packages), which is very problematic to me | 16:57:00 |
@oxalica:matrix.org | I'm trying to enable all rules in at least stage 2. https://github.com/NixOS/nixpkgs/pull/198823
Maybe we should also include more rules in initrd? | 18:31:13 |
@elvishjerricco:matrix.org | oxalica: I could be wrong but doesn't systemd automatically include the udev rules in its own out path? Have you confirmed that they aren't actually currently in use in stage 2? | 18:32:14 |
@elvishjerricco:matrix.org | (stage 1 is another story of course) | 18:32:20 |