Re: [qubes-users] Re: Yubikey in challenge/response mode to unlock LUKS on boot

On Wednesday, 26 September 2018 03:28:21 UTC-4, simonda...@googlemail.com wrote: > Is this module working on Qubes 4.0? Yes, it is working for me on Qubes 4.0 and I have used it with LVM and Raid configurations. -- You received this message because you are subscribed to the Google Groups

Re: [qubes-users] Re: Yubikey in challenge/response mode to unlock LUKS on boot

Is this module working on Qubes 4.0? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email

Re: [qubes-users] Re: Yubikey in challenge/response mode to unlock LUKS on boot

Something unrelated completely corrupted my system. dom0 got hosed and I was not able to recover. So I have reinstalled qubes from scratch, but this time I am using a software raid on 2 nvme pcie drives. Qubes 4 set up does allow for an encrypted raid the graphical setup. It does not create

Re: [qubes-users] Re: Yubikey in challenge/response mode to unlock LUKS on boot

I love the new options. It works great to open 3 luks volumes on boot now. 2 of which have an LVM volume group for qubes, the 3rd just an extra ext4 volume. Two questions: 1) Can you execute multiple cryptsetup commands at the same time? It has to wait a few seconds for each one in

Re: [qubes-users] Re: Yubikey in challenge/response mode to unlock LUKS on boot

I've added a fallback option now that, if enabled, will prompt for the LUKS passphrase if no yubikey was found within the configured time. You can also specify the yubikey slot to use in the config now. And i've improved the message sending functions. Regards the2nd On Wed, Aug 15, 2018 at 10:29

Re: [qubes-users] Re: Yubikey in challenge/response mode to unlock LUKS on boot

Hmm, thats strange because it is working for me and it was working for you before. I've updated the github version to explicit install cryptsetup. Please let me know if this fixes the problem. On Wed, Aug 15, 2018 at 9:45 PM, Joeviocoe Gmail wrote: > Thanks. Something messed up though. >

Re: [qubes-users] Re: Yubikey in challenge/response mode to unlock LUKS on boot

Thanks. I'll try it. What's the best to add the UUID? I assume edit the grub.cfg directly. But will kernel updates overwrite? Do I need to edit something else and run dracut -f? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To

Re: [qubes-users] Re: Yubikey in challenge/response mode to unlock LUKS on boot

Hi, i've modified the module to support multiple LUKS devices (UUIDs). It works with my setup which has only one LUKS device but it should work with more than one. You have to add the UUIDs of you luks devices separated by comma (e.g. rd.ykluks.uuid=UUD1,UUID2,UUID3). Hope this works and happy

[qubes-users] Re: Yubikey in challenge/response mode to unlock LUKS on boot

> Please note that the current version will probably not work with a default > qubes LUKS-on-LVM installation. But if some experienced user is willing to > help testing i'll try to come up with a version that supports this too. > > Besides the yubikey/luks stuff the module handles the

Re: [qubes-users] Re: Yubikey in challenge/response mode to unlock LUKS on boot

On Sunday, 22 October 2017 08:56:55 UTC-4, the2nd wrote: > Regarding the other questions/problems. > > 2) If you want to unlock the luks device without yubikey you can use the > steps from the "Something went wrong :(" section, skipping step 4. This > should disable the ykluks module and

Re: [qubes-users] Re: Yubikey in challenge/response mode to unlock LUKS on boot

On Monday, 23 October 2017 23:42:56 UTC-4, the2nd wrote: > Is there only one line? Or one line per uuid? Can you provide the complete > Output? > > > Regards > the2nd > > > > Am 24.10.2017 5:31 vorm. schrieb "Ron Qubed" : > > On Sunday, October 22, 2017 at 6:56:55 AM

Re: [qubes-users] Re: Yubikey in challenge/response mode to unlock LUKS on boot

Is there only one line? Or one line per uuid? Can you provide the complete Output? Regards the2nd Am 24.10.2017 5:31 vorm. schrieb "Ron Qubed" : On Sunday, October 22, 2017 at 6:56:55 AM UTC-6, the2nd wrote: > Hello, > > sorry for the long delay. Didnt had time to answer. >

Re: [qubes-users] Re: Yubikey in challenge/response mode to unlock LUKS on boot

On Sunday, October 22, 2017 at 6:56:55 AM UTC-6, the2nd wrote: > Hello, > > sorry for the long delay. Didnt had time to answer. > > If some of you is willing to help with testing LUKS-on-LVM could you please > provide the output of the commands below? > > sudo su - > .

Re: [qubes-users] Re: Yubikey in challenge/response mode to unlock LUKS on boot

Hello, sorry for the long delay. Didnt had time to answer. If some of you is willing to help with testing LUKS-on-LVM could you please provide the output of the commands below? sudo su - . /usr/lib/dracut/modules.d/99base/dracut-lib.sh getarg rd.ykluks.uuid If you have not modified your grub

Re: [qubes-users] Re: Yubikey in challenge/response mode to unlock LUKS on boot

On 10/02/2017 08:34 PM, joevio...@gmail.com wrote: On Saturday, 5 August 2017 11:20:27 UTC-4, the2nd wrote: Hi, i switched to Qubes OS 3.2 on my notebook some weeks ago. Besides some issues i had it works very well. One problem was to get the installer to install qubes on LVM-on-LUKS. I

[qubes-users] Re: Yubikey in challenge/response mode to unlock LUKS on boot

On Saturday, 5 August 2017 11:20:27 UTC-4, the2nd wrote: > Hi, > > i switched to Qubes OS 3.2 on my notebook some weeks ago. Besides some issues > i had it works very well. > > One problem was to get the installer to install qubes on LVM-on-LUKS. I > preferred this over the default

[qubes-users] Re: Yubikey in challenge/response mode to unlock LUKS on boot

On Saturday, 5 August 2017 11:20:27 UTC-4, the2nd wrote: > Hi, > > i switched to Qubes OS 3.2 on my notebook some weeks ago. Besides some issues > i had it works very well. > > One problem was to get the installer to install qubes on LVM-on-LUKS. I > preferred this over the default