I've added a fallback option now that, if enabled, will prompt for the LUKS passphrase if no yubikey was found within the configured time. You can also specify the yubikey slot to use in the config now. And i've improved the message sending functions.
Regards the2nd On Wed, Aug 15, 2018 at 10:29 PM, __ __ <hei...@gmail.com> wrote: > Good to know that it works now. 😊 > > Maybe i should add an option to make my module work without the yubikey in > case the yubikey is lost or otherwise not available. This should not be > hard to implement...... > > Joeviocoe Gmail <joevio...@gmail.com> schrieb am Mi., 15. Aug. 2018, > 22:23: > >> Yep, that's simply fixed it. It is strange that it needs to be explicit >> now when it had not before. >> >> also, I see that you are using the same display message function for >> everything. 1 second sleep time before it hides was too short, so I >> changed to 60 seconds. >> >> Thank you for updating you are awesome module. Both Luks volumes open at >> boot time now, so I can try extending my LVM to the new drive without >> leaving the data unencrypted. >> >> In case of recovery, I'm not sure how easy it will be to stop using your >> module with two encrypted volumes that need to be unlocked before the lvm. >> I don't think the native rd.luks.uuid Will allow comma separated values. >> >> I will let you know how well it boots after I extend the lvm to the new >> drive so you can update your documentation regarding LUKS on LVM. >> Thanks again. >> >> On Wed, Aug 15, 2018, 4:05 PM __ __ <hei...@gmail.com> wrote: >> >>> Hmm, thats strange because it is working for me and it was working for >>> you before. >>> >>> I've updated the github version to explicit install cryptsetup. >>> >>> Please let me know if this fixes the problem..... >>> >>> On Wed, Aug 15, 2018 at 9:45 PM, Joeviocoe Gmail <joevio...@gmail.com> >>> wrote: >>> >>>> Thanks. Something messed up though. >>>> >>>> I added a single comma, and the uuid for the new Crypt_luks... To that >>>> line in etc/default/grub. >>>> I ran mkgrub and dracut -f as per the normal installation. >>>> Got an error saying it could not find the device, then I realized the >>>> only recently made the updates to the GitHub. >>>> >>>> Downloaded and installed the new git. the changes seem pretty >>>> straightforward, and shouldn't cause a problem. >>>> >>>> But now, I have an error from dracut-initqueue saying cryptsetup >>>> command not found on line 66 of ykluks.sh >>>> >>>> Also, the yubikey prompt to insert, does not show up. Just a blank >>>> screen until I insert the key, then it does prompt for the passphrase. >>>> >>>> I reinstalled the old version I had, removed the second uuid from >>>> default grub, and reran the mkgrub & dracut -f... It is prompting me to >>>> insert the yubikey again, but I still have the error of command not found >>>> for cryptsetup. >>>> >>>> I have two entries in etc/crypttab, for each uuid, but those are both >>>> commented out. >>>> I don't know why dracut cannot find the command. >>>> Now I have to use the full passphrase by removing the yk as shown in >>>> the recovery steps. >>>> >>>> On Wed, Aug 15, 2018, 12:43 PM __ __ <hei...@gmail.com> wrote: >>>> >>>>> You can add it to the GRUB_CMDLINE_LINUX in /etc/default/grub >>>>> >>>>> On Wed, Aug 15, 2018 at 6:38 PM, <joevio...@gmail.com> wrote: >>>>> >>>>>> Thanks. I'll try it. >>>>>> What's the best to add the UUID? I assume edit the grub.cfg >>>>>> directly. But will kernel updates overwrite? Do I need to edit >>>>>> something >>>>>> else and run dracut -f? >>>>>> >>>>>> -- >>>>>> You received this message because you are subscribed to a topic in >>>>>> the Google Groups "qubes-users" group. >>>>>> To unsubscribe from this topic, visit https://groups.google.com/d/ >>>>>> topic/qubes-users/hB0XaquzBAg/unsubscribe. >>>>>> To unsubscribe from this group and all its topics, send an email to >>>>>> qubes-users+unsubscr...@googlegroups.com. >>>>>> To post to this group, send email to qubes-users@googlegroups.com. >>>>>> To view this discussion on the web visit https://groups.google.com/d/ >>>>>> msgid/qubes-users/f09343a5-6ff7-4283-b8e2-d1df0e3a1b95% >>>>>> 40googlegroups.com. >>>>>> For more options, visit https://groups.google.com/d/optout. >>>>>> >>>>> >>>>> >>> -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAA0%2BMPfed9F9VMZ%2BDMKHK1bwA4%3DUufA9Y6Xaw1Syd5roMyDOwQ%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
