This repository has no description
yubikey: remove old broken config
author
lassulus
date
(Oct 22, 2024, 1:32 AM CEST)
commit
5e51677b
5e51677bd7b3adbe0fa55f6ca0a56f4d3e9ef7d5
parent
91b43770
91b437700f902a68c7648e36652e2cc26db06d26
+1
-28
+1
-28
2configs/yubikey.nix
+1
-28
2configs/yubikey.nix
···
1
1
{
2
2
self,
3
-
lib,
4
3
pkgs,
5
4
...
6
5
}:
7
-
let
8
-
# pcsclite workaround until https://github.com/NixOS/nixpkgs/pull/308884 is in unstable
9
-
pcsclite = pkgs.pcsclite.overrideAttrs (old: {
10
-
postPatch =
11
-
old.postPatch
12
-
+ (lib.optionalString
13
-
(!(lib.strings.hasInfix ''--replace-fail "libpcsclite_real.so.1"'' old.postPatch))
14
-
''
15
-
substituteInPlace src/libredirect.c src/spy/libpcscspy.c \
16
-
--replace-fail "libpcsclite_real.so.1" "$lib/lib/libpcsclite_real.so.1"
17
-
''
18
-
);
19
-
});
20
-
in
21
6
{
22
7
environment.systemPackages = with pkgs; [
23
8
yubikey-personalization
···
36
21
systemd.user.services.gpg-agent.serviceConfig.ExecStartPre = pkgs.writers.writeDash "init_gpg" ''
37
22
set -x
38
23
mkdir -p $HOME/.gnupg
39
-
${pkgs.coreutils}/bin/ln -sf ${pkgs.writeText "scdaemon.conf" ''
40
-
disable-ccid
41
-
pcsc-driver ${pcsclite.lib}/lib/libpcsclite.so.1
42
-
card-timeout 1
43
-
44
-
# Always try to use yubikey as the first reader
45
-
# even when other smart card readers are connected
46
-
# Name of the reader can be found using the pcsc_scan command
47
-
# If you have problems with gpg not recognizing the Yubikey
48
-
# then make sure that the string here matches exacly pcsc_scan
49
-
# command output. Also check journalctl -f for errors.
50
-
reader-port Yubico YubiKey
51
-
''} $HOME/.gnupg/scdaemon.conf
24
+
rm -f $HOME/.gnupg/scdaemon.conf
52
25
'';
53
26
systemd.user.services.gpg-agent.serviceConfig.ExecStartPost = pkgs.writers.writeDash "init_gpg" ''
54
27
${pkgs.gnupg}/bin/gpg --import ${