!agkXCfUrgbadYlQXRj:kack.it

NixOS + TPMs

168 Members
42 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
15 Feb 2022
@stigo:matrix.org@stigo:matrix.org"happy" and "gpg" are unlikely to be in the same sentence though.16:04:08
@zhaofeng:zhaofeng.liZhaofeng Li
In reply to @stigo:matrix.org
Was wondering if anyone has had any luck setting up TPM2 with LUKS on NixOS?
I use clevis and add the decrypt command to my boot.initrd.luks.devices.<name>.preOpenCommands
16:30:19
@zhaofeng:zhaofeng.liZhaofeng LiI added an option so the decryption process immediately falls back to password if the key file doesn't exist instead of waiting: https://github.com/NixOS/nixpkgs/pull/15019616:31:16
@zhaofeng:zhaofeng.liZhaofeng LiFor better TPM+LUKS integration, there was https://github.com/NixOS/nixpkgs/pull/134577 but it was decided that we wanted to wait for systemd in stage-1 for cryptenroll support which is still in limbo at the moment16:33:00
@stigo:matrix.org@stigo:matrix.org
In reply to @zhaofeng:zhaofeng.li
I use clevis and add the decrypt command to my boot.initrd.luks.devices.<name>.preOpenCommands
Thx for the info! Yeah, I'll be patient and wait for systemd-cryptenroll stuffs to be ready
16:41:58
@stigo:matrix.org@stigo:matrix.orgJust to mention about gpg. Some of the things that work well with it are ssh and encryption/decryption (vith epa in emacs, and tomb, for instance), and has a nice tpm2 integration. Signature verification, trust models, sks, email, and all that is a different story though. Imho.16:54:31
@stigo:matrix.org@stigo:matrix.org * Just to mention about gpg. Some of the things that work well with it are ssh and encryption/decryption (vith epa in emacs, tomb, and pass, for instance), and has a nice tpm2 integration. Signature verification, trust models, sks, email, and all that is a different story though. Imho.16:57:03
* @colemickens:matrix.org@colemickens:matrix.org contemplates the meaning of "work well" vs "works, after internalizing countless pitfalls and nearly encoding gpg quirks as muscle memory"20:14:56
@stigo:matrix.org@stigo:matrix.org
In reply to * @colemickens:matrix.org
contemplates the meaning of "work well" vs "works, after internalizing countless pitfalls and nearly encoding gpg quirks as muscle memory"
Yeah, there is for sure a lot of that. s/work well/is useful/ would be more accurate.
20:22:49
@colemickens:matrix.org@colemickens:matrix.orgYes sadly it can be made to do many neat things, and as I've been discovering, the non-gpg world has some odd gaps too, so woo.20:29:10
18 Feb 2022
@cw:kernelpanic.cafe@cw:kernelpanic.cafe changed their display name from Chuck Winter to Chuck Winter (vi/vim).04:12:15
@cw:kernelpanic.cafe@cw:kernelpanic.cafe changed their display name from Chuck Winter (vi/vim) to Chuck Winter.04:20:42
21 Feb 2022
@cw:kernelpanic.cafe@cw:kernelpanic.cafe changed their display name from Chuck Winter to Chinchilla Wetreat.00:47:23
25 Feb 2022
@stacktrust:matrix.orgstacktrust joined the room.04:04:13
28 Feb 2022
@florian:web3.foundation@florian:web3.foundation changed their display name from Florian | W3F to Florian | W3F - OoO 02.03..10:12:18
2 Mar 2022
@florian:web3.foundation@florian:web3.foundation changed their display name from Florian | W3F - OoO 02.03. to Florian | W3F.08:14:42
3 Mar 2022
@colemickens:matrix.org@colemickens:matrix.org changed their display name from colemickens 🏳️‍🌈 to colemickens.07:13:32
9 Mar 2022
@wamserma:nixos.devwamserma joined the room.20:32:08
11 Mar 2022
@wamserma:nixos.devwamserma changed their display name from Markus Wamser to wamserma.06:34:45

Show newer messages


Back to Room ListRoom Version: 6