Nitrokey and udev rules

2018-05-22 Thread Pierre Neidhardt
I'm trying to use my nitrokey on GuixSD. --8<---cut here---start->8--- > gpg --card-status gpg: selecting openpgp failed: No such device gpg: OpenPGP card not available: No such device --8<---cut here---end--->8--- It turns

Re: Nitrokey and udev rules

2018-05-22 Thread Ricardo Wurmus
Pierre Neidhardt writes: > I'm trying to use my nitrokey on GuixSD. > > --8<---cut here---start->8--- >> gpg --card-status > gpg: selecting openpgp failed: No such device > gpg: OpenPGP card not available: No such device > --8<---cut here--

Re: Nitrokey and udev rules

2018-05-22 Thread Pierre Neidhardt
Indeed, `guix system reconfigure` shows my 41-nitrokey rule. Does anyone know how to further debug udev rules? -- Pierre Neidhardt Silence is the element in which great things fashion themselves. -- Thomas Carlyle signature.asc Description: PGP signature

Re: Nitrokey and udev rules

2018-05-22 Thread Marius Bakke
Pierre Neidhardt writes: > I'm trying to use my nitrokey on GuixSD. > > --8<---cut here---start->8--- >> gpg --card-status > gpg: selecting openpgp failed: No such device > gpg: OpenPGP card not available: No such device > --8<---cut here---

Re: Nitrokey and udev rules

2018-05-23 Thread Pierre Neidhardt
Marius Bakke writes: > As a workaround you can try e.g. 'GROUP+="gpg", MODE=”0660″'. I tried your suggestion but then `dmesg | grep udevd` rightfully complained that the "gpg" group did not exist. Am I supposed to create it? Anyways, I tried with 'GROUP+="users", MODE=”0666″', but it did not w

Re: Nitrokey and udev rules

2018-05-23 Thread Pierre Neidhardt
NixOS has packaged Nitrokey App: https://github.com/NixOS/nixpkgs/tree/master/pkgs/tools/security/nitrokey-app I'm not too familiar with the system, but I understand that they've replaced "plugdev" by "nitrokey". Not sure how that can help. NixOS uses systemd however. -- Pierre Neid

Re: Nitrokey and udev rules

2018-05-23 Thread Pierre Neidhardt
I've reported upstream: https://support.nitrokey.com/t/guixsd-no-such-device/1117 -- Pierre Neidhardt signature.asc Description: PGP signature

Re: Nitrokey and udev rules

2018-05-23 Thread Mike Gerwitz
On Tue, May 22, 2018 at 12:53:43 +0200, Pierre Neidhardt wrote: > I'm trying to use my nitrokey on GuixSD. I use a Nitrokey Pro on GuixSD. >> gpg --card-status > gpg: selecting openpgp failed: No such device > gpg: OpenPGP card not available: No such device Have you started pcscd? We don't yet

Re: Nitrokey and udev rules

2018-05-24 Thread Pierre Neidhardt
Mike Gerwitz writes: > Have you started pcscd? We don't yet have a service for it, so that > needs to be done manually. When I first log in, I run it as root (just > `sudo pcscd'), and then `gpg --card-status` works as expected. > > Can you give that a try? I did: --8<---cut here

Re: Nitrokey and udev rules

2018-05-24 Thread Mike Gerwitz
Pierre: On Thu, May 24, 2018 at 16:04:31 +0200, Pierre Neidhardt wrote: > Mike Gerwitz writes: [...] > I did: > >> sudo pcscd >> gpg --card-status > gpg: selecting openpgp failed: No such device > gpg: OpenPGP card not available: No such device > > Can you share your udev rules? I don't have

Re: Nitrokey and udev rules

2018-05-24 Thread Ricardo Wurmus
Mike Gerwitz writes: > Looking through my notes, it looks like I symlinked > `/run/current-system/profile/pcsc/drivers/' to `/var/lib/pcsc/drivers'. > See Marius Bakke's message on ccid here: > > <87vawczpb2.fsf@duckhunt.i-did-not-set--mail-host-address--so-tickle-me>: > https://lists.gnu.or

Re: Nitrokey and udev rules

2018-05-25 Thread Pierre Neidhardt
Ricardo Wurmus writes: > Mike Gerwitz writes: > >> Looking through my notes, it looks like I symlinked >> `/run/current-system/profile/pcsc/drivers/' to `/var/lib/pcsc/drivers'. >> See Marius Bakke's message on ccid here: >> >> <87vawczpb2.fsf@duckhunt.i-did-not-set--mail-host-address--so-tic

Re: Nitrokey and udev rules

2018-05-25 Thread Pierre Neidhardt
Different issue, but I have a few problems with `gpg --card-edit`: 1. I can't seem to be able to change the PIN with any pinentry but pinentry-gtk-2: - With pinentry-emacs: > Error changing the PIN: No pinentry - With pinentry-tty: > Error changing the PIN: End of file - With pinentry-curses: >

Re: Nitrokey and udev rules

2018-05-25 Thread Mike Gerwitz
On Fri, May 25, 2018 at 16:46:57 +0200, Pierre Neidhardt wrote: > 1. I can't seem to be able to change the PIN with any pinentry but > pinentry-gtk-2: I have this in my ~/.gnupg/gpg-agent.conf: pinentry-program /run/current-system/profile/bin/pinentry Maybe you can try something like that? >

Re: Nitrokey and udev rules

2018-05-25 Thread Mike Gerwitz
On Fri, May 25, 2018 at 07:22:57 +0200, Ricardo Wurmus wrote: > This sounds like you’ve installed the package into the system profile. > If this works we should probably add a system service that takes care of > setting up this directory. I'd love to have a service; I just haven't had the time to