From af3a789a175dccf6fab923ea92b8cfd5112305d7 Mon Sep 17 00:00:00 2001
From: Lars Wirzenius <liw@liw.fi>
Date: Sat, 6 Aug 2022 13:07:25 +0300
Subject: stamina: allow use of Yubikey for LUKS

Sponsored-by: author
---
 ansible/solace.yml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/ansible/solace.yml b/ansible/solace.yml
index af7730f..b3b7eaa 100644
--- a/ansible/solace.yml
+++ b/ansible/solace.yml
@@ -142,6 +142,19 @@
     #     owner: liw
     #     group: liw
 
+    - name: "install necessary packages to use a Yubikey with LUKS"
+      apt:
+        name:
+          - yubikey-luks
+          - usbutils
+    - name: "configure crypttab to use yubikey-luks key script"
+      crypttab:
+        name: pv0
+        opts: keyscript=/usr/share/yubikey-luks/ykluks-keyscript
+        state: opts_present
+    - name: "update initramfs"
+      shell: |
+        update-initramfs -u
   vars:
     ansible_python_interpreter: /usr/bin/python3
 
-- 
cgit v1.2.1