I use SSDs on my machines which are luks formatted, to enable TRIM/discard I had to add the discardd
option to /etc/crypttab
crypt_nas UUID=887c0b7c-3ef1-499c-a36e-e1842bebf69a none luks,initramfs …I have two luks formatted partitions which need to be unlocked a boot.
To aid in unlocking remotely I use dropbear-initramfs which allows running the cryptroot-unlock
script over ssh. However …
To configure one or more yubi keys to act as a 2fa challenge for Linux desktop login do the following:
If you lock a Yubi key's GPG functionality by entering the admin pin wrong 3 times (or some how just screw it up) do the following:
Copy this into a …
I've recently replaced my GPG keys with new ones stored on Yubi keys, why? Well...