sebastien rey-coyrehourcq <[email protected]> writes:
Hi,I jump into guile world by learning and copy/pasting Dominic Martinez config :)
Nice to know my config helped someone! Sorry it's a bit of a mess, I didn't really document anything.
Everything going pretty well but now i'm blocked with yubikey configuration.And without yubikey that contain your only private key to sign/decrypt everything, that's alittle complicated ...Running "gpg --card-status" my yubikey is correclty detected. That a good news ... BUTthat's all, other command don't work, for example both : gpg --list-secret-keys gpg --list-keys
When you say it doesn't work, do you mean it doesn't list any keys? If you have keys on your Yubikey that you used with GPG on a different system, you'll have to re-export the key stubs for GPG to use the Yubikey for authentication (see https://github.com/drduh/YubiKey-Guide#switching-between-two-or-more-yubikeys).
If you're getting other errors, you might need to enable some system services. For instance, you need the pcscd service (https://guix.gnu.org/manual/devel/en/guix.html#index-pcscd), and also the udev rules appropriate for your Yubikey model (https://github.com/Yubico/libfido2/blob/main/udev/70-u2f.rules). The below snippet should get all Yubikey functionality working:
#+begin_src scheme
(service pcscd-service-type)
(udev-rules-service 'yubikey-rules
(udev-rule
"70-u2f.rules"
(string-append
;; All keys
"ACTION!=\"add|change\",
GOTO=\"u2f_end\"\n"
;; Yubikey
"KERNEL==\"hidraw*\", "
"SUBSYSTEM==\"hidraw\", "
"ATTRS{idVendor}==\"1050\", "
"ATTRS{idProduct}==\"0113|0114|0115|0116|0120|0121|0200|0402|0403|0406|0407|0410\",
"
"TAG+=\"uaccess\", MODE=\"0660\"\n"
;; End all keys
"LABEL=\"u2f_end\"")))
#+end_src
signature.asc
Description: PGP signature
