lattice0 · October 17, 2025 22:31 · Oct 17, 2025 · Jul 13, 2025 · Jul 13, 2025 · Jul 13, 2025
diff --git a/gistfile1.txt b/gistfile1.txt
@@ -12,7 +12,7 @@ And if you move computers, in the new one just run
 ssh-keygen -K
 ```
 
-which will load the secret key ID (not the actual secret key) from the yubikey and place on the .ssh folder.
+which will load the secret key ID (not the actual secret key) from the yubikey and place on the .ssh folder, and also load the .pub as well.
 
 # To use:
 

diff --git a/gistfile1.txt b/gistfile1.txt
@@ -1,7 +1,7 @@
 # To generate:
 
 ```
-ssh-keygen -t ed25519-sk -O resident -O verify-required -C "0000000" -O application=ssh:0000000
+ssh-keygen -t ed25519-sk -O resident -O verify-required -C "0000000" -O application=ssh:0000000 -f $HOME/.ssh/id_ed25519_sk_000000
 ```
 
 The `-O application=ssh:0000000` ensures that it will import and save with that name when you run `ssh-keygen -K`, preventing overrides.

diff --git a/gistfile1.txt b/gistfile1.txt
@@ -1,7 +1,7 @@
 # To generate:
 
 ```
-ssh-keygen -t ed25519-sk -O resident -O verify-required -C "yk_0000000" -O application=ssh:0000000
+ssh-keygen -t ed25519-sk -O resident -O verify-required -C "0000000" -O application=ssh:0000000
 ```
 
 The `-O application=ssh:0000000` ensures that it will import and save with that name when you run `ssh-keygen -K`, preventing overrides.

diff --git a/gistfile1.txt b/gistfile1.txt
@@ -1,7 +1,7 @@
 # To generate:
 
 ```
-ssh-keygen -t ed25519-sk -O resident -O verify-required -C "yk_0000000" -O application=ssh:0000000 -f $HOME/.ssh/id_ed25519_sk_0000000
+ssh-keygen -t ed25519-sk -O resident -O verify-required -C "yk_0000000" -O application=ssh:0000000
 ```
 
 The `-O application=ssh:0000000` ensures that it will import and save with that name when you run `ssh-keygen -K`, preventing overrides.

diff --git a/gistfile1.txt b/gistfile1.txt
@@ -1,9 +1,11 @@
 # To generate:
 
 ```
-ssh-keygen -t ed25519-sk -O resident -O verify-required -C "0000000" -f $HOME/.ssh/id_ed25519_sk_000000
+ssh-keygen -t ed25519-sk -O resident -O verify-required -C "yk_0000000" -O application=ssh:0000000 -f $HOME/.ssh/id_ed25519_sk_0000000
 ```
 
+The `-O application=ssh:0000000` ensures that it will import and save with that name when you run `ssh-keygen -K`, preventing overrides.
+
 And if you move computers, in the new one just run
 
 ```

diff --git a/gistfile1.txt b/gistfile1.txt
@@ -1,7 +1,7 @@
 # To generate:
 
 ```
-ssh-keygen -t ed25519-sk -O resident -O verify-required -C "0000000" -O application=ssh:ed25519 -f $HOME/.ssh/id_ed25519_sk_000000
+ssh-keygen -t ed25519-sk -O resident -O verify-required -C "0000000" -f $HOME/.ssh/id_ed25519_sk_000000
 ```
 
 And if you move computers, in the new one just run

diff --git a/gistfile1.txt b/gistfile1.txt
@@ -1,7 +1,7 @@
 # To generate:
 
 ```
-ssh-keygen -t ed25519-sk -O resident -O verify-required -C "0000000"
+ssh-keygen -t ed25519-sk -O resident -O verify-required -C "0000000" -O application=ssh:ed25519 -f $HOME/.ssh/id_ed25519_sk_000000
 ```
 
 And if you move computers, in the new one just run

diff --git a/gistfile1.txt b/gistfile1.txt
@@ -1,7 +1,7 @@
 # To generate:
 
 ```
-ssh-keygen -t ed25519-sk -O resident -O application=ssh:<UID> -C "My Comment"
+ssh-keygen -t ed25519-sk -O resident -O verify-required -C "0000000"
 ```
 
 And if you move computers, in the new one just run

diff --git a/gistfile1.txt b/gistfile1.txt
@@ -0,0 +1,37 @@
+# To generate:
+
+```
+ssh-keygen -t ed25519-sk -O resident -O application=ssh:<UID> -C "My Comment"
+```
+
+And if you move computers, in the new one just run
+
+```
+ssh-keygen -K
+```
+
+which will load the secret key ID (not the actual secret key) from the yubikey and place on the .ssh folder.
+
+# To use:
+
+```
+sudo apt install -y gnupg2 gnupg-agent scdaemon pcscd yubikey-manager
+```
+
+```
+gpg --card-status
+```
+
+Add this to your shell profile (~/.bashrc, ~/.zshrc, etc.):
+
+```
+export GPG_TTY=$(tty)
+export SSH_AUTH_SOCK=$(gpgconf --list-dirs agent-ssh-socket)
+gpgconf --launch gpg-agent
+```
+
+Then reload your shell or run:
+
+```
+source ~/.bashrc  # or ~/.zshrc
+```