Homelab

2345 readers

1 users here now

Rules

Be Civil.
Post about your homelab, discussion of your homelab, questions you may have, or general discussion about transition your skill from the homelab to the workplace.
No memes or potato images.
We love detailed homelab builds, especially network diagrams!
Report any posts that you feel should be brought to our attention.
Please no shitposting or blogspam.
No Referral Linking.
Keep piracy discussion off of this community

founded 2 years ago

MODERATORS

communick@selfhosted.forum

rglullis@communick.news

Unlocking LUKS with NitroKey/Yubikey: FIDO2, HMAC-SHA1, or OpenPGP? (thebrainbin.org)

submitted 2 days ago by modem_down@thebrainbin.org to c/homelab@selfhosted.forum

3 comments fedilink hide all child comments

Crossposted from https://thebrainbin.org/m/linux@lemmy.ml/t/1840283

Which approach do you think is better, and why?

FIDO2

HMAC-SHA1

OpenPGP (alternative guide)

Or do you think there is an even better way to use a hardware security token to unlock drives having LUKS full disk encryption?

you are viewing a single comment's thread
view the rest of the comments

[–] noxypaws@pawb.social 3 points 2 days ago (1 children)

I'd use a pair of yubikeys but that's just because I already have them. and I say pair cuz I don't want to rely on a single yubikey that could get lost or stolen or damaged

also I would want there to still be a password required, not just plugging in a hardware token (tho this may be implied)

[–] modem_down@thebrainbin.org 1 points 2 days ago (1 children)

I agree about needing a backup hardware token (or paper recovery key) to restore access if the primary hardware token is lost or broken.

Also agree about requiring a passphrase.

Any specific recommendations on protocol or setup steps?

[–] noxypaws@pawb.social 1 points 2 days ago

nope! I only use a passphrase, no experience to draw from to make recommendations