https://github.com/daringer/smartcard-key-luks

OpenPGP smartcard setup with Linux boot (forked from https://source.puri.sm/pureos/packages/smartcard-key-luks)
https://github.com/daringer/smartcard-key-luks

Last synced: 8 months ago
JSON representation

OpenPGP smartcard setup with Linux boot (forked from https://source.puri.sm/pureos/packages/smartcard-key-luks)

• Host: GitHub
• URL: https://github.com/daringer/smartcard-key-luks
• Owner: daringer
• License: gpl-3.0
• Created: 2021-06-02T09:19:33.000Z (about 5 years ago)
• Default Branch: main
• Last Pushed: 2021-06-03T12:25:15.000Z (about 5 years ago)
• Last Synced: 2024-12-01T20:22:27.274Z (over 1 year ago)
• Language: Shell
• Size: 45.9 KB
• Stars: 4
• Watchers: 2
• Forks: 1
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# smartcard-key-luks

OpenPGP smartcard setup with Linux boot.

## Description

This is a bash script that takes advantage of cryptsetup's new OpenPGP

smartcard support (https://tracker.pureos.net/T462).

You run the script with the GPG public key it should use, and it

automatically sets up a new LUKS secret, encrypts it against that

public key, and sets up crypttab, LUKS, initramfs, and GRUB so that

when you boot, you are prompted to insert your Librem Key and enter

your normal GPG PIN to decrypt your disk. It also modifys the

"recovery" boot option in grub to bypass the GPG key and request your

passphrase instead.