Groups > linux.debian.bugs.dist > #1076288

Bug#991129: systemd: FIDO2 tokens not supported on this build.

From	Christoph <c@kluenter.de>
Newsgroups	linux.debian.bugs.dist
Subject	Bug#991129: systemd: FIDO2 tokens not supported on this build.
Date	2021-10-17 13:10 +0200
Message-ID	<D9cdc-4nb-5@gated-at.bofh.it> (permalink)
References	<CB2gh-1ca-1@gated-at.bofh.it> <CB7pD-4uh-3@gated-at.bofh.it> <CB7pD-4uh-3@gated-at.bofh.it> <CB2gh-1ca-1@gated-at.bofh.it> <CB7pD-4uh-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

     On Thu, 15 Jul 2021 13:07:35 +0200 Michael Biebl <biebl@debian.org> 
wrote:
 > Am 15.07.21 um 07:35 schrieb Guy Rutenberg:
 > > Package: systemd
 > > Version: 249-1
 > > Severity: normal
 > > X-Debbugs-Cc: guyrutenberg@gmail.com
 > >
 > > Dear Maintainer,
 > >
 > > I'm trying to test out the new FIDO2 support for LUKS via 
systemd-cryptenroll.
 > > However, when trying to use the --fido2-device switch, for example 
in the
 > > following command
 > > ```
 > > systemd-cryptenroll --fido2-device list
 > > ```
 > > The command fails and reports
 > >
 > > ```
 > > FIDO2 tokens not supported on this build.
 > > ```
 > >
 > > Additional information:
 > > I have the `libfido2-1` package installed. I don't know if that 
should be
 > > required or not.
 >
 > src:systemd is built without libfido support, so what you see is 
expected.
 >
 >

Hi,

since 248 systemd supports fido to decrypt luks encrypted partitions on 
boot [1].

Fido was disabled because it was only needed for homed. This is not the 
case anymore.

Are there any plans to enable fido in future?


Cheers,

   Christoph



[1] 
http://0pointer.net/blog/unlocking-luks2-volumes-with-tpm2-fido2-pkcs11-security-hardware-on-systemd-248.html

Back to linux.debian.bugs.dist | Previous | Next | Find similar | Unroll thread

Thread

Bug#991129: systemd: FIDO2 tokens not supported on this build. Christoph <c@kluenter.de> - 2021-10-17 13:10 +0200

csiph-web