diff --git a/README.md b/README.md index 6dfff16..22c5ca0 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ This will allow you to unlock your luks encrypted disk with an fido2 compatible key -Note: This has only been tested under Fedora 31 using a Solo Key, Trezor Model T +Note: This has only been tested under Fedora 31, [Ubuntu 20.04](initramfs-tools/), [NixOS](https://nixos.org/nixos/manual/#sec-luks-file-systems-fido2) using a Solo Key, Trezor Model T ## Setup diff --git a/initramfs-tools/README.md b/initramfs-tools/README.md new file mode 100644 index 0000000..63f11a2 --- /dev/null +++ b/initramfs-tools/README.md @@ -0,0 +1,13 @@ +## Initramfs-tools based systems(Ubuntu and derivatives) + +After installation generate your credentials and add keys to your disk as described in the top-level README +then add `initramfs,keyscript=fido2luks` to your `/etc/crypttab` + +Example: +``` +sda6_crypt UUID=9793d81a-4cfb-4712-85f3-c7a8d715112c none luks,discard,initramfs,keyscript=fido2luks +``` + +But don't forget to run `make install` which will install all necessary scripts and regenerate your intrid. + +[Recording showing part of the setup](https://shimun.net/fido2luks/setup.svg) \ No newline at end of file