From e18ad25efd2768e597aaa9f94071ed47cb65803f Mon Sep 17 00:00:00 2001
From: Ben Sima <ben@bsima.me>
Date: Mon, 31 Jan 2022 16:45:55 -0500
Subject: yubikey login on helium

This allows me to login and sudo with *either* a password or my yubikey.

I also had to setup my yubikey with the instructions here:
https://nixos.wiki/wiki/Yubikey#Logging-in

Basically use ykman and ykpamcfg to generate a challenge-response setup
on slot 2 of my yubikey. The pam config compares the key response with
the ~/.yubico/challenge-* file in order to authenticate. I think pam
uses the ~/.yubico/authorized_keys file to know to which yubikey to send
the challenge, but I'm not sure on that one.
---
 lib/linux.nix | 1 +
 1 file changed, 1 insertion(+)

(limited to 'lib/linux.nix')

diff --git a/lib/linux.nix b/lib/linux.nix
index c98124f..912e8bc 100644
--- a/lib/linux.nix
+++ b/lib/linux.nix
@@ -135,6 +135,7 @@ in
       xterm
       yank
       youtube-dl
+      yubioath-desktop
       zathura
 
       # languages i regularly use
-- 
cgit v1.2.3