diff --git a/Justfile b/Justfile index 414e736..3521e0b 100755 --- a/Justfile +++ b/Justfile @@ -222,7 +222,7 @@ install-config config root: sudo just run-with-channels nixos-install -I nixos-config={{ invocation_directory() }}/{{ config }} --root {{ root }} --no-root-passwd # Switch between gpg-card capable devices which have a copy of the same key -switch-gpg-card key-id="6EEFA706CB17E89B": +switch-gpg-card: #!/usr/bin/env bash # # Derived from https://github.com/drduh/YubiKey-Guide/issues/19. @@ -230,11 +230,7 @@ switch-gpg-card key-id="6EEFA706CB17E89B": # Connect the new device and then run this script to make it known to gnupg. # set -xe - if [[ -n "{{key-id}}" ]]; then - KEY_ID="{{key-id}}" - else - KEY_ID=$(gpg --card-status | rg sec | rg -o '[0-9A-Z]{16}') - fi + KEY_ID=$(gpg --card-status | rg sec | rg -o '[0-9A-Z]{16}') # export pubkey and ownertrust gpg2 --output "${KEY_ID}".pubkey --export "${KEY_ID}" diff --git a/nix/home-manager/configuration/graphical-fullblown.nix b/nix/home-manager/configuration/graphical-fullblown.nix index 50bfbad..d5b69c2 100644 --- a/nix/home-manager/configuration/graphical-fullblown.nix +++ b/nix/home-manager/configuration/graphical-fullblown.nix @@ -105,7 +105,7 @@ in # Password Management gnupg - yubikey-manager + # yubikey-manager yubikey-personalization yubikey-personalization-gui @@ -244,8 +244,7 @@ in # libretro.snes9x2010 # retroarchFull - # pkgs.logseq-bin - pkgs.logseq + pkgs.logseq-bin # (pkgs.callPackage "${repoFlake.inputs.nixpkgs-logseq}/pkgs/by-name/lo/logseq-bin/package.nix" { }) ]) ++ (with repoFlake.packages.${pkgs.system}; [ gimp ]) diff --git a/nix/home-manager/programs/gpg-agent.nix b/nix/home-manager/programs/gpg-agent.nix index b81c150..41ab604 100644 --- a/nix/home-manager/programs/gpg-agent.nix +++ b/nix/home-manager/programs/gpg-agent.nix @@ -1,11 +1,11 @@ -{ lib, pkgs, osConfig, ... }: +{ lib, pkgs, ... }: { home.packages = [ pkgs.gcr ]; programs.gpg.enable = true; services.gpg-agent = { enable = true; - enableScDaemon = !osConfig.services.pcscd.enable; + enableScDaemon = true; enableSshSupport = true; grabKeyboardAndMouse = true; pinentryPackage = lib.mkDefault pkgs.pinentry-gtk2; diff --git a/nix/os/devices/steveej-x13s/configuration.nix b/nix/os/devices/steveej-x13s/configuration.nix index d5c9475..316dc8d 100644 --- a/nix/os/devices/steveej-x13s/configuration.nix +++ b/nix/os/devices/steveej-x13s/configuration.nix @@ -161,11 +161,6 @@ ]; } - { - # yubikey / smartcard. only set to `true` for `ykman piv` commands. - services.pcscd.enable = false; - } - # TODO: create syncthing os snippet ( let diff --git a/nix/os/devices/steveej-x13s/flake.lock b/nix/os/devices/steveej-x13s/flake.lock index 6b3ab4a..b0fd80a 100644 --- a/nix/os/devices/steveej-x13s/flake.lock +++ b/nix/os/devices/steveej-x13s/flake.lock @@ -38,11 +38,11 @@ ] }, "locked": { - "lastModified": 1743598667, - "narHash": "sha256-ViE7NoFWytYO2uJONTAX35eGsvTYXNHjWALeHAg8OQY=", + "lastModified": 1741786315, + "narHash": "sha256-VT65AE2syHVj6v/DGB496bqBnu1PXrrzwlw07/Zpllc=", "owner": "nix-community", "repo": "disko", - "rev": "329d3d7e8bc63dd30c39e14e6076db590a6eabe6", + "rev": "0d8c6ad4a43906d14abd5c60e0ffe7b587b213de", "type": "github" }, "original": { @@ -327,11 +327,11 @@ }, "nixpkgs-stable": { "locked": { - "lastModified": 1743703532, - "narHash": "sha256-s1KLDALEeqy+ttrvqV3jx9mBZEvmthQErTVOAzbjHZs=", + "lastModified": 1742937945, + "narHash": "sha256-lWc+79eZRyvHp/SqMhHTMzZVhpxkRvthsP1Qx6UCq0E=", "owner": "nixos", "repo": "nixpkgs", - "rev": "bdb91860de2f719b57eef819b5617762f7120c70", + "rev": "d02d88f8de5b882ccdde0465d8fa2db3aa1169f7", "type": "github" }, "original": { @@ -343,16 +343,16 @@ }, "nixpkgs-unstable": { "locked": { - "lastModified": 1743814133, - "narHash": "sha256-drDyYyUmjeYGiHmwB9eOPTQRjmrq3Yz26knwmMPLZFk=", - "owner": "nixos", + "lastModified": 1743251636, + "narHash": "sha256-ozpMykG34AT0xOYmst43eh1KTYba7QEaDzeCkPWzIP4=", + "owner": "steveej-forks", "repo": "nixpkgs", - "rev": "250b695f41e0e2f5afbf15c6b12480de1fe0001b", + "rev": "2a75dc2e69a7c3e786ebe0663613a9a7ee1c108f", "type": "github" }, "original": { - "owner": "nixos", - "ref": "nixos-unstable-small", + "owner": "steveej-forks", + "ref": "nixos-unstable", "repo": "nixpkgs", "type": "github" } diff --git a/nix/os/devices/steveej-x13s/flake.nix b/nix/os/devices/steveej-x13s/flake.nix index 469cf92..e82c81d 100644 --- a/nix/os/devices/steveej-x13s/flake.nix +++ b/nix/os/devices/steveej-x13s/flake.nix @@ -2,8 +2,7 @@ inputs = { nixpkgs.follows = "nixpkgs-unstable"; nixpkgs-stable.url = "github:nixos/nixpkgs/nixos-24.11"; - nixpkgs-unstable.url = "github:nixos/nixpkgs/nixos-unstable-small"; - # nixpkgs-unstable.url = "github:steveej-forks/nixpkgs/nixos-unstable"; + nixpkgs-unstable.url = "github:steveej-forks/nixpkgs/nixos-unstable"; get-flake.url = "github:ursi/get-flake";