Skip to content

Commit

Permalink
Update luks-enable-fido2-unlock
Browse files Browse the repository at this point in the history
  • Loading branch information
ShadowSlayer1441 authored Jan 3, 2025
1 parent fb02982 commit 024c6ef
Showing 1 changed file with 2 additions and 6 deletions.
8 changes: 2 additions & 6 deletions files/system/usr/libexec/luks-enable-fido2-unlock
Original file line number Diff line number Diff line change
Expand Up @@ -102,12 +102,8 @@ if lsinitrd 2>&1 | grep -q fido2 > /dev/null; then
## add fido2 to initramfs
if rpm-ostree initramfs | grep fido2 > /dev/null; then
echo "FIDO2 already present in rpm-ostree initramfs config."
echo ""
echo "Congratulations!"
echo "Your system is now configured to use FIDO2 unlocking via the hardware key you used earlier. If you previously used TPM luks unlocking, ensure you run 'ujust remove-luks-tpm-unlock'. Otherwise, the system will likely default to TPM auto-unlocking on boot."
echo ""
echo "REMINDER: Store on another computer, on an encrypted drive, the script created backup key (which is at /var/home/$SUDO_USER/Desktop/luks_backup_key.txt)"
exit 0
rpm-ostree initramfs
echo "Re-running initramfs to pickup changes above."
fi
rpm-ostree initramfs --enable --arg=--force-add --arg=fido2
else
Expand Down

0 comments on commit 024c6ef

Please sign in to comment.