talexander/machine_setup
1
0
Fork 0
Code Issues Pull Requests Releases Activity

More failed attempts to get gpg working.

Browse Source
This commit is contained in:
Tom Alexander 2025-01-02 09:43:00 -05:00
parent 7c5f14ee61
commit 04a95a2543
Signed by: talexander
GPG Key ID: D3A179C9A53C0EDE
1 changed files with 17 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
nix/configuration/roles/gpg/default.nix
View File

@ -15,7 +15,18 @@
# gpg -vvv --auto-key-locate local,wkd --locate-keys tom@fizz.buzz # gpg -vvv --auto-key-locate local,wkd --locate-keys tom@fizz.buzz
hardware.gpgSmartcards.enable = true; hardware.gpgSmartcards.enable = true;
services.udev.packages = [ pkgs.yubikey-personalization ]; services.udev.packages = [
pkgs.yubikey-personalization
pkgs.libfido2
(pkgs.writeTextFile {
name = "my-rules";
text = ''
ACTION=="add", SUBSYSTEM=="usb", ENV{ID_VENDOR_ID}=="1050", ENV{ID_MODEL_ID}=="0406", MODE="660", GROUP="wheel"
KERNEL=="hidraw*", SUBSYSTEM=="hidraw", ATTRS{idVendor}=="1050", ATTRS{idProduct}=="0406", TAG+="uaccess", GROUP="wheel", MODE="0660"
'';
destination = "/etc/udev/rules.d/50-yubikey.rules";
})
];
services.pcscd.enable = true; services.pcscd.enable = true;
# services.gnome.gnome-keyring.enable = true; # services.gnome.gnome-keyring.enable = true;
@ -36,7 +47,7 @@
}; };
}; };
programs.gnupg.dirmngr.enable = true; # programs.gnupg.dirmngr.enable = true;
programs.gnupg.agent = { programs.gnupg.agent = {
enable = true; enable = true;
enableSSHSupport = true; enableSSHSupport = true;
@ -87,12 +98,15 @@
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
pcsctools pcsctools
yubikey-personalization
yubikey-manager
]; ];
# nixpkgs.overlays = [ # nixpkgs.overlays = [
# (final: prev: { # (final: prev: {
# gnupg = pkgs-unstable.gnupg; # gnupg = pkgs-unstable.gnupg;
# scdaemon = pkgs-unstable.scdaemon; # scdaemon = pkgs-unstable.scdaemon;
# libgcrypt = pkgs-unstable.libgcrypt;
# }) # })
# ]; # ];
@ -108,4 +122,5 @@
# }) # })
# ]; # ];
programs.gnupg.agent.enableExtraSocket = true;
} }