Kyle Isom
490db0599c
HardwareFIDO2 implements FIDO2Device via go-libfido2 (CGo bindings to Yubico's libfido2). Gated behind //go:build fido2 tag to keep default builds CGo-free. Nix flake adds sgard-fido2 package variant. CLI changes: --fido2-pin flag, unlockDEK helper tries FIDO2 first, add-fido2/encrypt init --fido2 use real hardware, auto-unlock added to restore/checkpoint/diff for encrypted entries. Tested manually: add-fido2, add --encrypt, restore, checkpoint, diff all work with hardware FIDO2 key (touch-to-unlock, no passphrase). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
69 lines
1.8 KiB
Nix
69 lines
1.8 KiB
Nix
{
|
|
description = "sgard — Shimmering Clarity Gardener: dotfile management";
|
|
|
|
inputs = {
|
|
nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable";
|
|
flake-utils.url = "github:numtide/flake-utils";
|
|
};
|
|
|
|
outputs = { self, nixpkgs, flake-utils }:
|
|
flake-utils.lib.eachDefaultSystem (system:
|
|
let
|
|
pkgs = import nixpkgs { inherit system; };
|
|
in
|
|
{
|
|
packages = {
|
|
sgard = pkgs.buildGoModule {
|
|
pname = "sgard";
|
|
version = "2.1.0";
|
|
src = pkgs.lib.cleanSource ./.;
|
|
subPackages = [ "cmd/sgard" "cmd/sgardd" ];
|
|
|
|
vendorHash = "sha256-0aGo5EbvPWt9Oflq+GTq8nEBUWZj3O5Ni4Qwd5EBa7Y=";
|
|
|
|
ldflags = [ "-s" "-w" ];
|
|
|
|
meta = {
|
|
description = "Shimmering Clarity Gardener: dotfile management";
|
|
mainProgram = "sgard";
|
|
};
|
|
};
|
|
|
|
sgard-fido2 = pkgs.buildGoModule {
|
|
pname = "sgard-fido2";
|
|
version = "2.1.0";
|
|
src = pkgs.lib.cleanSource ./.;
|
|
subPackages = [ "cmd/sgard" "cmd/sgardd" ];
|
|
|
|
vendorHash = "sha256-LSz15iFsP4N3Cif1PFHEKg3udeqH/9WQQbZ50sxtWTk=";
|
|
|
|
buildInputs = [ pkgs.libfido2 ];
|
|
nativeBuildInputs = [ pkgs.pkg-config ];
|
|
tags = [ "fido2" ];
|
|
|
|
ldflags = [ "-s" "-w" ];
|
|
|
|
meta = {
|
|
description = "Shimmering Clarity Gardener: dotfile management (with FIDO2 hardware support)";
|
|
mainProgram = "sgard";
|
|
};
|
|
};
|
|
|
|
default = self.packages.${system}.sgard;
|
|
};
|
|
|
|
devShells.default = pkgs.mkShell {
|
|
buildInputs = with pkgs; [
|
|
go
|
|
golangci-lint
|
|
protobuf
|
|
protoc-gen-go
|
|
protoc-gen-go-grpc
|
|
libfido2
|
|
pkg-config
|
|
];
|
|
};
|
|
}
|
|
);
|
|
}
|