This article describes how to use YubiKeys for FIDO2-based Full Disk Encryption (FDE) on NixOS. The keys can be used as single-factor authentication devices or in combination with a pin. Throughout this guide, names surrounded by < > characters are used as placeholders, replace them with the appropriate values. Preparations Installer Get a minimal ISO image and boot it. Switch to the root user. sudo -i Optionally, change the keyboard layout. ...
Note: I have found a different approach to achieve the same thing as described in this post. It is, in my experience, both easier to configure, more reliable, and easier to maintain. This article describes how to set up YubiKey-based Full Disk Encryption (FDE) on NixOS. The YubiKeys are used as single-factor authentication devices and allow the system to automatically decrypt the disk during boot without user interaction, as long as a key is plugged in. ...
JWMenu is a small, configurable menu runner built on top of rofi. It is designed to be easy to configure by using TOML configuration files instead of relying on long scripts with hardcoded options. You can create nested submenus, assign commands to entries, or even have multi-line commands. This makes it ideal for things like: System menus Power menus Quick options and toggles …and anything else you can imagine that fits into a hierarchical menu. ...