Skip to content

flake.nix + qemu.mk : add working qemu-canokey usable from all qemu boards by default - #1671

Merged
tlaurion merged 1 commit into
linuxboot:masterfrom
tlaurion:nix_qemu-canokey_derivate
May 13, 2024
Merged

flake.nix + qemu.mk : add working qemu-canokey usable from all qemu boards by default#1671
tlaurion merged 1 commit into
linuxboot:masterfrom
tlaurion:nix_qemu-canokey_derivate

Conversation

@tlaurion

@tlaurion tlaurion commented May 12, 2024

Copy link
Copy Markdown
Collaborator
  • flake.nix: add canokey-qemu lib, derivate qemu on tope of it and have qemu_kvm depend on qemu derivative
  • targets/qemu.mk: modified to had canokey support by default if no "USB_TOKEN=" specified on make run call
  • CircleCI: base docker image pull on v0.1.6 containing the newly added derivatives

Fixes #1670
Closes #1207


Finally, bye errors of qemu TCG on top of qemu on top of qubesos with usb error -32.

It's alive!!!
2024-05-12-132729


Someone.... wants to implement reverse HOTP inside of canokey-qemu???

…oards by default

flake.nix: add canokey-qemu lib, derivate qemu on tope of it and have qemu_kvm depend on qemu derivative
targets/qemu.mk: modified to had canokey support by default if no "USB_TOKEN=" specified on make run call

CircleCI: base docker image pull on v0.1.6 containing the newly added derivatives
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
@tlaurion

tlaurion commented May 12, 2024

Copy link
Copy Markdown
Collaborator Author

To test and replicate:

docker run -e DISPLAY=$DISPLAY --network host --rm -ti -v $(pwd):$(pwd) -w $(pwd) tlaurion/heads-dev-env:latest -- make BOARD=qemu-coreboot-fbwhiptail-tpm2
docker run -e DISPLAY=$DISPLAY --network host --rm -ti -v $(pwd):$(pwd) -w $(pwd) tlaurion/heads-dev-env:latest -- make BOARD=qemu-coreboot-fbwhiptail-tpm2 run

Follow:

@tlaurion

Copy link
Copy Markdown
Collaborator Author

@JonathonHall-Purism quick review, doesn't change much but canokey being usable if no usb security token being passed in make run call

@JonathonHall-Purism JonathonHall-Purism left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks fine 👍

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Nix buildstack next step : have and use qemu-canokey non-existing pre-compiled qemu/kvm in docker image Support Canokey under Qemu+tpm - fastpath?

2 participants