ZacharyZhang-NY/omarchycn
4
5
Fork 0
Code Issues Pull Requests 2 Actions Packages Projects Releases 5 Wiki Activity

Not worth the extraction

Browse Source
This commit is contained in:
David Heinemeier Hansson
2026-05-08 20:52:29 +02:00
parent df4ffe991f
commit 30f9a8da54
8 changed files with 43 additions and 71 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bin/omarchy-setup-security-fido2
+16 -16
View File
@@ -9,7 +9,7 @@ set -e
check_fido2_hardware() {
tokens=$(fido2-token -L 2>/dev/null)
if [[ -z $tokens ]]; then
omarchy-echo-failure "\nNo FIDO2 device detected. Please plug it in (you may need to unlock it as well)."
echo -e "\e[31m\nNo FIDO2 device detected. Please plug it in (you may need to unlock it as well).\e[0m"
return 1
fi
return 0
@@ -18,16 +18,16 @@ check_fido2_hardware() {
setup_pam_config() {
# Configure sudo
if ! grep -q pam_u2f.so /etc/pam.d/sudo; then
omarchy-echo-info "Configuring sudo for FIDO2 authentication..."
echo "Configuring sudo for FIDO2 authentication..."
sudo sed -i '1i auth sufficient pam_u2f.so cue authfile=/etc/fido2/fido2' /etc/pam.d/sudo
fi
# Configure polkit
if [[ -f /etc/pam.d/polkit-1 ]] && ! grep -q 'pam_u2f.so' /etc/pam.d/polkit-1; then
omarchy-echo-info "Configuring polkit for FIDO2 authentication..."
echo "Configuring polkit for FIDO2 authentication..."
sudo sed -i '1i auth sufficient pam_u2f.so cue authfile=/etc/fido2/fido2' /etc/pam.d/polkit-1
elif [[ ! -f /etc/pam.d/polkit-1 ]]; then
omarchy-echo-info "Creating polkit configuration with FIDO2 authentication..."
echo "Creating polkit configuration with FIDO2 authentication..."
sudo tee /etc/pam.d/polkit-1 >/dev/null <<'EOF'
auth sufficient pam_u2f.so cue authfile=/etc/fido2/fido2
auth required pam_unix.so
@@ -39,10 +39,10 @@ EOF
fi
}
omarchy-echo-success "Setting up FIDO2 device for authentication.\n"
echo -e "\e[32mSetting up FIDO2 device for authentication.\n\e[0m"
# Install required packages
omarchy-echo-info "Installing required packages..."
echo "Installing required packages..."
omarchy-pkg-add libfido2 pam-u2f
if ! check_fido2_hardware; then
@@ -52,30 +52,30 @@ fi
# Create the pamu2fcfg file
if [[ ! -f /etc/fido2/fido2 ]]; then
sudo mkdir -p /etc/fido2
omarchy-echo-success "\nLet's setup your device by confirming on the device now."
omarchy-echo-info "Touch your FIDO2 key when it lights up...\n"
echo -e "\e[32m\nLet's setup your device by confirming on the device now.\e[0m"
echo -e "Touch your FIDO2 key when it lights up...\n"
if pamu2fcfg >/tmp/fido2; then
sudo mv /tmp/fido2 /etc/fido2/fido2
omarchy-echo-success "FIDO2 device registered successfully!"
echo -e "\e[32mFIDO2 device registered successfully!\e[0m"
else
omarchy-echo-failure "\nFIDO2 registration failed. Please try again."
echo -e "\e[31m\nFIDO2 registration failed. Please try again.\e[0m"
exit 1
fi
else
omarchy-echo-info "FIDO2 device already registered."
echo "FIDO2 device already registered."
fi
# Configure PAM
setup_pam_config
# Test with sudo
omarchy-echo-info "\nTesting FIDO2 authentication with sudo..."
omarchy-echo-info "Touch your FIDO2 key when prompted.\n"
echo -e "\nTesting FIDO2 authentication with sudo..."
echo -e "Touch your FIDO2 key when prompted.\n"
if sudo echo "FIDO2 authentication test successful"; then
omarchy-echo-success "\nPerfect! FIDO2 authentication is now configured."
omarchy-echo-info "You can use your FIDO2 key for sudo and polkit authentication."
echo -e "\e[32m\nPerfect! FIDO2 authentication is now configured.\e[0m"
echo "You can use your FIDO2 key for sudo and polkit authentication."
else
omarchy-echo-failure "\nVerification failed. You may want to check your configuration."
echo -e "\e[31m\nVerification failed. You may want to check your configuration.\e[0m"
fi