Yubikey setup for GPG

Yubikey setup for GPG

[LaFreniere, Joseph]

Does anyone have a working guide for setting up a Yubikey for use 
with GnuPG in Guix System?  It seems that the packaged gpg is 
built with pcsc-lite rather than scdaemon, so much of the 
information in e.g. the Arch wiki is not applicable.

The specific error I'm getting when running `gpg2 --card-status` 
is

> gpg: selecting card failed: No such device
> gpg: OpenPGP card not available: No such device

--
Joseph LaFreniere

re: Yubikey setup for GPG

[Jesse Gibbons]

I had a similar problem with my Librem key. I fixed it by including 
(service pcscd-service-type) in my system configuration, reconfiguring 
my guix system, and making sure I have one of the pinentry packages 
installed and configured.

See 
https://guix.gnu.org/manual/en/html_node/Miscellaneous-Services.html#index-pcscd

Re: Yubikey setup for GPG

[LaFreniere, Joseph]

Jesse Gibbons <jgibbons2357@gmail.com> writes:
> I had a similar problem with my Librem key. I fixed it by 
> including (service
> pcscd-service-type) in my system configuration, reconfiguring my 
> guix system,
> and making sure I have one of the pinentry packages installed 
> and configured.
>
> See
> https://guix.gnu.org/manual/en/html_node/Miscellaneous-Services.html#index-pcscd

Thanks for the tip!  I'm reconfiguring right now.  If I don't 
respond in this thread again, any future readers should assume the 
default configuration was sufficient for a YubiKey 5 NFC.

--
Joseph LaFreniere

Re: Yubikey setup for GPG

[pukkamustard]

Hello Joseph,

I'm using a Yubikey with GnuPG on Guix, but don't remember the 
exact
steps I had to do to make it work.

I do have the pcscd-service started with following entry:

(service pcscd-service-type)

I didn't find any other special configuration anywhere else.

Hope that helps,
-pukkamustard

LaFreniere, Joseph <joseph@lafreniere.xyz> writes:

> Does anyone have a working guide for setting up a Yubikey for 
> use with GnuPG in
> Guix System?  It seems that the packaged gpg is built with 
> pcsc-lite rather than
> scdaemon, so much of the information in e.g. the Arch wiki is 
> not applicable.
>
> The specific error I'm getting when running `gpg2 --card-status` 
> is
>
>> gpg: selecting card failed: No such device
>> gpg: OpenPGP card not available: No such device