systemd 253 Released With Ukify Tool, systemd-cryptenroll Unlocking Via FIDO2 Tokens

[phoronix]

Phoronix: systemd 253 Released With Ukify Tool, systemd-cryptenroll Unlocking Via FIDO2 Tokens

After going through several release candidates the past few weeks, systemd 253 has officially shipped today as the newest version of this init system and service manager for Linux systems...

https://www.phoronix.com/news/systemd-253

[post-factum]

- systemd-cryptenroll now supports unlocking via FIDO2 tokens.

It was possible to do something like

sudo systemd-cryptenroll --fido2-device=auto /dev/md1

way before this release. What changed?

[wooptoo]

- systemd-cryptenroll now supports unlocking via FIDO2 tokens.

It's been possible for a while: https://0pointer.net/blog/unlocking-...stemd-248.html
Not sure what's new here.

[CommunityMember]

What changed?

My recollection is that enrolling a FIDO2 token no longer requires setting a password, and multiple FIDO2 tokens are supported.

[Mahboi]

"UKify"? What's that? The services start logging with a cockney accent? Or they act like chavs?

"Oi bruv, erra' been reco'ded at 4'n'a'half'o'clock dis mornin, ricieved Segfault"
"Not mah pro'lem if yer cod sags like yer mum bruv, izh your affairs to deal wit'"

[jacob]

"UKify"? What's that? The services start logging with a cockney accent? Or they act like chavs?

Someone explained it in a previous thread: it changes your desktop background to the Union Jack, puts all windows controls on the left side and renames the logout option as Brexit

[jrkb]

- systemd-boot adds a "if-safe" mode to perform UEFI Secure Boot automated certificate enrollment from the EFI System Partition (ESP) only if it is considered "safe" to do so. For this release it's deemed "safe" if running within a virtual machine.
https://www.phoronix.com/news/systemd-253

what does this mean? this sounds like possible issues when booting as main OS.

[cynic]

Someone explained it in a previous thread: it changes your desktop background to the Union Jack, puts all windows controls on the left side and renames the logout option as Brexit

and renames browser cookies in bisquits!

[sinepgib]

"UKify"? What's that? The services start logging with a cockney accent? Or they act like chavs?

"Oi bruv, erra' been reco'ded at 4'n'a'half'o'clock dis mornin, ricieved Segfault"
"Not mah pro'lem if yer cod sags like yer mum bruv, izh your affairs to deal wit'"

I love the joke, but just in case the question part was for real, it's a way to say "create a Unified Kernel Image (UKI)", which is simply putting the kernel, initrd and microcode in the same package and signing it.

[JanW]

"UKify"? What's that? The services start logging with a cockney accent? Or they act like chavs?

"Oi bruv, erra' been reco'ded at 4'n'a'half'o'clock dis mornin, ricieved Segfault"
"Not mah pro'lem if yer cod sags like yer mum bruv, izh your affairs to deal wit'"

It's about creating Lennard Poetterings brave new world: https://www.phoronix.com/news/Lennar...ted-Boot-World