Re: Guix home, guix system, channels, some noob questions

["Sébastien Rey-Coyrehourcq" <sebastien.rey-coyrehourcq@univ-rouen.fr>]

[-- Attachment #1.1.1: Type: text/plain, Size: 3086 bytes --]


Le 13/06/2022 à 21:31, Dominic Martinez a écrit :
>
> sebastien rey-coyrehourcq <sebastien.rey-coyrehourcq@univ-rouen.fr> 
> writes:
>
>> Hi,
>>
>> I jump into guile world by learning and copy/pasting Dominic Martinez 
>> config :)
>
> Nice to know my config helped someone! Sorry it's a bit of a mess, I 
> didn't really document anything.
I'm interested to better understand some Guile snippet of your config, 
if you're ok, is it possible to ask that in another mail or irc ?
>
>> Everything going pretty well but now i'm blocked with yubikey 
>> configuration.
>>
>> And without yubikey that contain your only private key to 
>> sign/decrypt everything, that's a
>> little complicated ...
>>
>> Running "gpg --card-status" my yubikey is correclty detected. That a 
>> good news ... BUT
>> that's all,
>> other command don't work, for example both :
>>
>> gpg --list-secret-keys
>> gpg --list-keys
>
> When you say it doesn't work, do you mean it doesn't list any keys? If 
> you have keys on your Yubikey that you used with GPG on a different 
> system, you'll have to re-export the key stubs for GPG to use the 
> Yubikey for authentication (see 
> https://github.com/drduh/YubiKey-Guide#switching-between-two-or-more-yubikeys).
>
Thanks! This only manipulation seems not enough and i finally found that 
importing public key is required, from server or directly from the key ....

yourkey.asc | gpg --import

After that, everything goes well !

> If you're getting other errors, you might need to enable some system 
> services. For instance, you need the pcscd service 
> (https://guix.gnu.org/manual/devel/en/guix.html#index-pcscd), and also 
> the udev rules appropriate for your Yubikey model 
> (https://github.com/Yubico/libfido2/blob/main/udev/70-u2f.rules). The 
> below snippet should get all Yubikey functionality working:
>
> #+begin_src scheme
> (service pcscd-service-type)
> (udev-rules-service 'yubikey-rules
>                     (udev-rule
>                      "70-u2f.rules"
>                      (string-append
>                       ;; All keys
>                       "ACTION!=\"add|change\",                       
> GOTO=\"u2f_end\"\n"
>                       ;; Yubikey
>                       "KERNEL==\"hidraw*\", "
>                       "SUBSYSTEM==\"hidraw\", "
>                       "ATTRS{idVendor}==\"1050\", "
> "ATTRS{idProduct}==\"0113|0114|0115|0116|0120|0121|0200|0402|0403|0406|0407|0410\", 
>                        "
>                       "TAG+=\"uaccess\", MODE=\"0660\"\n"
>                       ;; End all keys
>                       "LABEL=\"u2f_end\"")))
> #+end_src

I already copy paste this part from your config :)

Thanks again !

Sébastien RC.


[-- Attachment #1.1.2: OpenPGP public key --]
[-- Type: application/pgp-keys, Size: 8861 bytes --]

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 833 bytes --]