Unlocking LUKS with Yubikey on dracut or mkinitcpio on Arch Linux

Prerequisites Make sure you have LUKS2 A FIDO2 compatible security key like the Yubikey 5 Install libfido2 and dracut or mkinitcpio Adding A Security Key Check your security key is present sudo systemd-cryptenroll --fido2-device=list If the security key is detected, you should see the device info similar to the following: PATH MANUFACTURER PRODUCT /dev/hidraw4 Yubico YubiKey OTP+FIDO+CCID Actually adding the security key to LUKS sudo systemd-cryptenroll /dev/name --fido2-device=auto --fido2-with-client-pin=yes It’s going to ask for your PIN, after you entered the correct PIN, it’s going to ask you to tap the security key twice....

March 18, 2023

Arch Linux Installtion

Arch Installation Installation 1. Partion a disk fdisk /dev/sda d # Delete Partitions p # List Partitions n # Create Partitions w # Execute changes 2. Make filesystems mkfs.ext4 /dev/sda2 mkfs.fat -F32 /dev/sda1 3. Mount Partitions mount /mnt /dev/sda2 mkdir /mnt/boot mount /mnt/boot /dev/sda1 4. Connect a WiFi First, if you do not know your wireless device name, list all Wi-Fi devices: [iwd]# device list Then, to scan for networks: [iwd]# station device scan You can then list all available networks: [iwd]# station device get-networks Finally, to connect to a network: [iwd]# station device connect SSID 5....

December 4, 2021