fido2 yubikey has been working out great on my steam deck, but cant help but wonder, how can i be ev

fido2 yubikey has been working out great on my steam deck, but cant help but wonder, how can i be even lazier about it without compromising security. Anybody try out tpm2 with pcr measurements? am wondering how these would work out on bazzite

DevilFish303OP•3/29/24, 7:07 PM

someone was asking earlier what the point of secure boot was, i guess using tpm2 with pcr 7 is a another good example of what it might be useful for if anything. Set secure boot to on, set luks encryption to decrypt with tpm, include pcr7 so it will prompt for a passphrase instead on unlock if secure boot is ever disabled

DevilFish303OP•3/29/24, 7:08 PM

im just not sure if combining pcr 7 with 8 or 11 would work out due to the way how rpm-ostree works

Daph•3/29/24, 7:38 PM

dumb question maybe but i can't figure out how to make the ptyxis background fully black and not transparent

DDaph dumb question maybe but i can't figure out how to make the ptyxis background ful...

Kyle Gospo•3/29/24, 7:39 PM

The transparency is a dconf we apply to KDE

Kyle Gospo•3/29/24, 7:40 PM

Not exposed in the UI yet unfortunately

Kyle Gospo•3/29/24, 7:40 PM

You can reset that value to get it back to being opaque

Daph•3/29/24, 7:40 PM

alright ty

DDevilFish303 fido2 yubikey has been working out great on my steam deck, but cant help but won...

Side Effect•3/29/24, 7:52 PM

I know some of these words!
Good to know about the yubikey.
I have one, two actually, since you always need a backup, but have yet to start using it. It feels both daunting and somehow cumbersome, to start using a physical key for accessing my digital stuff, but I know it's the right way.
Any tips and tricks for a beginner?

SSide Effect I know some of these words! Good to know about the yubikey. I have one, two actu...

DevilFish303OP•3/29/24, 7:56 PM

yeah this guide that was previously posted, its all you need, let me find it

TTrigg Might not be a surprise to some people, but I've had a fun half hour doing this ...

DevilFish303OP•3/29/24, 7:56 PM

this one

DDevilFish303 this one

Side Effect•3/29/24, 8:03 PM

Thanks a lot!
Read it.
That works for passwordless/pinless login too, right? Just plug in the key and tap it.
I also recently started (finally, omg why haven't I done that before) using a password manager, but have yet to really start using the yubikey

SSide Effect Thanks a lot! Read it. That works for passwordless/pinless login too, right? Jus...

DevilFish303OP•3/29/24, 8:10 PM

yeah, i found it a bit tricky, i got the yubikey that lights up, i tap it when the light starts pulsating slowly, indicating to me that its prompting for the touch, idk how it would work with yubikeys with physical buttons

Trigg•3/29/24, 8:11 PM

Huh, a ping that wasn't a bug report. Strange

TTrigg Huh, a ping that wasn't a bug report. Strange

Side Effect•3/29/24, 8:12 PM

Thanks for sharing the guide to yubikey your Bazzite install

DDevilFish303 yeah, i found it a bit tricky, i got the yubikey that lights up, i tap it when t...

Trigg•3/29/24, 8:12 PM

Mine has a light in a physical button, works as you described above

Trigg•3/29/24, 8:13 PM

It wasn't my guide

Just something I really wanted to make happen

Trigg•3/29/24, 8:13 PM

I'm always super weird about leaving login details on unecrypted devices

TTrigg Huh, a ping that wasn't a bug report. Strange

DevilFish303OP•3/29/24, 8:14 PM

heh sorry idk how to repost past messages, a bit of a discord noob

Trigg•3/29/24, 8:14 PM

Oh I don't mind. But a bazzite ping is almost always 'it broke'

It was a nice change

Side Effect•3/29/24, 8:17 PM

Thanks nonetheless

It's probably my final push to actually start using my key which has just been sitting there for a year now.
I've got the yubikey 5C NFC, with all the bells and whistles.
I totally get the reluctance to lug around unencrypted devices with lots of passwords on

Trigg•3/29/24, 8:19 PM

The graphical unlock could do with some explaination IMO. Currently it just does the spinning 'loading' screen while waiting for your key & interaction.

I wonder how hard it would be to patch that into plymouth

DevilFish303OP•3/29/24, 8:20 PM

it also looks like yubikey, or any other fido2 physical key, is the only way to have a truly secure deck, tpm2 would work if steam deck supported secure boot and allow us to lock down the BIOS with a password. There still questions about pcr 11-15 that im not sure would work on bazzite

Trigg•3/29/24, 8:23 PM

Yeah I shied away from secureboot without knowing for sure I could change it from BIOS with a secure BIOS password

antheas•3/29/24, 8:33 PM

ok guys, need some testers for the next hhd version

antheas•3/29/24, 8:33 PM

biggest change is that i grab the controller now, so no more passthrough to games

antheas•3/29/24, 8:33 PM

but as its a big change, i need someone to test

antheas•3/29/24, 8:34 PM

and probably one or more versions down the line i will also support external controllers

Smabe•3/29/24, 8:34 PM

I’ll test it out

antheas•3/29/24, 8:35 PM

you remember the steps?

antheas•3/29/24, 8:35 PM

you also need the new overlay app image

Aantheas you remember the steps?

Smabe•3/29/24, 8:36 PM

Vaguely enough that I’d need a refresher. Stop hhd then run local copy from whatever bin directory?

antheas•3/29/24, 8:36 PM

lemme pull up the script

SSmabe Vaguely enough that I’d need a refresher. Stop hhd then run local copy from what...

antheas•3/29/24, 8:36 PM

sudo systemctl stop hhd@$(whoami)
sudo pkill hhd

rm -rf ~/.local/share/hhd
mkdir -p ~/.local/share/hhd
python -m venv --system-site-packages ~/.local/share/hhd/venv
~/.local/share/hhd/venv/bin/pip install git+https://github.com/hhd-dev/adjustor git+https://github.com/hhd-dev/hhd

FINAL_URL='https://api.github.com/repos/hhd-dev/hhd-ui/releases/latest'
curl -L $(curl -s "${FINAL_URL}" | grep "browser_download_url" | cut -d '"' -f 4) -o $HOME/.local/share/hhd/hhd-ui
chmod +x $HOME/.local/share/hhd/hhd-ui

nohup sudo HHD_OVERLAY="$HOME/.local/share/hhd/hhd-ui" ~/.local/share/hhd/venv/bin/hhd --user $(whoami) &> /dev/null &

sudo systemctl stop hhd@$(whoami)
sudo pkill hhd

rm -rf ~/.local/share/hhd
mkdir -p ~/.local/share/hhd
python -m venv --system-site-packages ~/.local/share/hhd/venv
~/.local/share/hhd/venv/bin/pip install git+https://github.com/hhd-dev/adjustor git+https://github.com/hhd-dev/hhd

FINAL_URL='https://api.github.com/repos/hhd-dev/hhd-ui/releases/latest'
curl -L $(curl -s "${FINAL_URL}" | grep "browser_download_url" | cut -d '"' -f 4) -o $HOME/.local/share/hhd/hhd-ui
chmod +x $HOME/.local/share/hhd/hhd-ui

nohup sudo HHD_OVERLAY="$HOME/.local/share/hhd/hhd-ui" ~/.local/share/hhd/venv/bin/hhd --user $(whoami) &> /dev/null &

should work until you reboot

antheas•3/29/24, 8:36 PM

after you verify it works we'll make it a ujust

antheas•3/29/24, 8:37 PM

also check out the new theems

Niklas ⚡•3/29/24, 8:38 PM

somebody should pin it until it gets its own ujust command

Smabe•3/29/24, 8:40 PM

oo ocean theme

Trigg•3/29/24, 8:42 PM

Ooh, not come across HHD before. This looks fun

Aantheas also check out the new theems

Smabe•3/29/24, 8:44 PM

so far so good, just to make sure I'm on the right version HHD 2.3.0 hhd ui 2.2.0 Adjustor 2.1.2?

TTrigg Ooh, not come across HHD before. This looks fun

tryhardsoccermomswag•3/29/24, 8:46 PM

one of the main components that makes using most handheld PCs that aren't the steam deck actually usable

Trigg•3/29/24, 8:47 PM

I had wondered what people were doing for a compatibility layer, this is very much more sophisticated than I imagined.

Trigg•3/29/24, 8:48 PM

I tried getting my frame.work set up as a big picture style session and ended up with a pile of bash scripts all over the place and it wasn't sensible

SSmabe so far so good, just to make sure I'm on the right version HHD 2.3.0 hhd ui 2.2....

antheas•3/29/24, 8:48 PM

Probably lol

antheas•3/29/24, 8:48 PM

If you can see the ocean theme it's correct

Smabe•3/29/24, 8:49 PM

it looks great I like it

Smabe•3/29/24, 8:49 PM

anything specific to test?

SSmabe anything specific to test?

antheas•3/29/24, 8:52 PM

Use it in games and see if there's any weirdness with passthrough

Kid•3/29/24, 9:28 PM

Hey after the new image update yesterday, I wanted to use Waydroid.
I followed this guide:
https://universal-blue.discourse.group/docs?topic=32

But after

ujust setup-waydroid

ujust setup-waydroid

then

Initialize Waydroid

Initialize Waydroid

I can see that it's downloading the vanilla lineage os image, but following the guide further to

/usr/bin/waydroid-launcher

/usr/bin/waydroid-launcher

results in a small black screen

do you know how to fix that?

Universal Blue

Bazzite Waydroid Setup Guide

[Waydroid] NOTE: There is no GPU acceleration when using Nvidia’s proprietary drivers. Waydroid gives users access to an Android container. First-time Setup Open a host terminal and enter this command to setup Waydroid: ujust setup-waydroid Initialize Waydroid Waydroid requires users to initialize it for the first time which can be done by ...

KKid Hey after the new image update yesterday, I wanted to use Waydroid. I followed t...

tryhardsoccermomswag•3/29/24, 9:34 PM

pretty sure waydroid is broken after an update to the package

tryhardsoccermomswag•3/29/24, 9:35 PM

this happens sometimes

sudo systemctl stop hhd@$(whoami) sudo pkill hhd rm -rf ~/.local/share/hhd mkdir -p ~/.local/share/hhd python -m venv --system-site-packages ~/.local/share/hhd/venv ~/.local/share/hhd/venv/bin/pip install git+https://github.com/hhd-dev/adjustor git+https://github.com/hhd-dev/hhd FINAL_URL='https://api.github.com/repos/hhd-dev/hhd-ui/releases/latest' curl -L $(curl -s "${FINAL_URL}" | grep "browser_download_url" | cut -d '"' -f 4) -o $HOME/.local/share/hhd/hhd-ui chmod +x $HOME/.local/share/hhd/hhd-ui nohup sudo HHD_OVERLAY="$HOME/.local/share/hhd/hhd-ui" ~/.local/share/hhd/venv/bin/hhd --user $(whoami) &> /dev/null &

fido2 yubikey has been working out great on my steam deck, but cant help but wonder, how can i be ev

Similar Threads

Similar Threads

Similar Threads