Bug#1114764: ITP: fido2luks -- Unlock LUKS volumes at boot time using a FIDO2 token

[Alberto Garcia <berto@igalia.com>]

Package: wnpp
Severity: wishlist
Owner: Alberto Garcia <berto@igalia.com>
X-Debbugs-Cc: debian-devel@lists.debian.org

* Package name    : fido2luks
  Version         : 0.0.3
  Upstream Contact: Alberto Garcia <berto@igalia.com>
* URL             : https://github.com/bertogg/fido2luks
* License         : GPL-2+
  Programming Lang: POSIX shell
  Description     : Unlock LUKS volumes at boot time using a FIDO2 token

fido2luks is an extension to initramfs-tools to unlock LUKS-encrypted
disks at boot time using a FIDO2 token.

It is designed for LUKS volumes where a FIDO2 token was enrolled using
systemd-cryptenroll --fido2-device.

 ---

Additional info:

systemd allows unlocking LUKS volumes with a FIDO2 token such as the
Nitrokey, YubiKey, etc.

However for full disk encryption scenarios there is currently no way
in Debian to do it at boot time with initramfs-tools, as many users
have noted. The solution involves switching to dracut, and there are a
few tutorials available on the web.

This package provides a simple shell script that can do the job
without having to switch the initramfs implementation.