···

       
433
       
433
       
 
       
          echo "Please move your mouse to create needed randomness."

     

       
434
       
434
       
 
       
        ''}

     

       
435
       
435
       
 
       
          echo "Waiting for your FIDO2 device..."

     

       
436
       
436
       
-
       
          fido2luks open ${dev.device} ${dev.name} ${dev.fido2.credential} --await-dev ${toString dev.fido2.gracePeriod} --salt string:$passphrase

     

       
436
       
436
       
+
       
          fido2luks open${optionalString dev.allowDiscards " --allow-discards"} ${dev.device} ${dev.name} ${dev.fido2.credential} --await-dev ${toString dev.fido2.gracePeriod} --salt string:$passphrase

     

       
437
       
437
       
 
       
        if [ $? -ne 0 ]; then

     

       
438
       
438
       
 
       
          echo "No FIDO2 key found, falling back to normal open procedure"

     

       
439
       
439
       
 
       
          open_normally

     

···

       
9
       
9
       
 
       


     

       
10
       
10
       
 
       
rustPlatform.buildRustPackage rec {

     

       
11
       
11
       
 
       
  pname = "fido2luks";

     

       
12
       
12
       
-
       
  version = "0.2.19";

     

       
12
       
12
       
+
       
  version = "0.2.20";

     

       
13
       
13
       
 
       


     

       
14
       
14
       
 
       
  src = fetchFromGitHub {

     

       
15
       
15
       
 
       
    owner = "shimunn";

     

       
16
       
16
       
 
       
    repo = pname;

     

       
17
       
17
       
 
       
    rev = version;

     

       
18
       
18
       
-
       
    sha256 = "sha256-o21KdsAE9KznobdMMKfVmVnENsLW3cMZjssnrsoN+KY=";

     

       
18
       
18
       
+
       
    sha256 = "04gl7wn38f42mapmkf026rya668vvhm03yi8iqnz31xgggbr2irm";

     

       
19
       
19
       
 
       
  };

     

       
20
       
20
       
 
       


     

       
21
       
21
       
 
       
  buildInputs = [ cryptsetup ];

     
···

       
25
       
25
       
 
       
    export LIBCLANG_PATH="${llvmPackages.libclang.lib}/lib"

     

       
26
       
26
       
 
       
  '';

     

       
27
       
27
       
 
       


     

       
28
       
28
       
-
       
  cargoSha256 = "sha256-8JFe3mivf2Ewu1nLMugeeK+9ZXAGPHaqCyKfWfwLOc8=";

     

       
28
       
28
       
+
       
  cargoSha256 = "1sp52zsj0s3736zih71plnk01si24jsawnx0580qfgg322d5f601";

     

       
29
       
29
       
 
       


     

       
30
       
30
       
 
       
  meta = with lib; {

     

       
31
       
31
       
 
       
    description = "Decrypt your LUKS partition using a FIDO2 compatible authenticator";