I've always thought YubiKeys are expensive and too easy to loose or forget, so many thanks @Foxboron@chaos.social for ssh-tpm-agent ! I already had per-laptop #ssh keys, now they're sealed with its Tusted Platform Module (and a much shorter pass)👌

Install instructions: https://linderud.dev/blog/store-ssh-keys-inside-the-tpm-ssh-tpm-agent/
Presented at FOSDEM'25: https://archive.fosdem.org/2025/schedule/event/fosdem-2025-5544-hardware-backed-ssh-keys-ssh-tpm-agent/
Access rights tweaked with the help of https://fosdem.org/2026/events/attachments/ARFTHB-tpms_and_the_linux_kernel_unlocking_a_better_path_to_hardware_security/slides/267448/ignat-tpm_ornb8fs.pdf
poke #selfhosted

Morten Linderud

Store ssh keys inside the TPM: ssh-tpm-agent

After writing age-plugin-tpm a friend of mine at the hackerspace was super excited to finally have easy file encryption with TPM sealed keys, all without having to rely on gnupg. “This is great!” he said. “I wish I could have my SSH keys sealed in a TPM just as easily”. We should have left it at that. I shouldn’t have replied with a random assortment of facts like “I know google/go-tpm now”, or “but Go has a ssh-agent protocol implementation” followed-up with “Filippo has already implemented yub

Martin Kirchgessner @martin_kirch@piaille.fr

· 5mo ago

Replying to

@swheritage #jerecrute ⬆️

Martin Kirchgessner @martin_kirch@piaille.fr

· 6mo ago

Replying to

@bzg@floss.social meanwhile, the documentation : 👀 👉👈

Martin Kirchgessner @martin_kirch@piaille.fr

· 9mo ago

Très heureux d'être dans le programme de la prochaine @alposs@colter.social !

Dans deux mois j'essaierai donc de croiser librisme et radio FM - tous les détails sur https://pretalx.com/alposs-2026/talk/LBYTDU/

pretalx.com

Radios libres ? :: AlpOSS 2026 :: pretalx

Martin Kirchgessner @martin_kirch@piaille.fr

· 7mo ago

My presentation at #PyConFR25 is online (I'm late to notice, but thanks @AFPy@mamot.fr !)

If you're curious about how to spawn 10000 virtual filesystems to read the @swheritage@mstdn.social archive (in #Python) : https://indymotion.fr/w/uiD5uX2WFe9kagAvL5yR9D

Martin Kirchgessner - swh-fuse, or how to put a whole code archive behind a folder

IndyMotion

Martin Kirchgessner - swh-fuse, or how to put a whole code archive behind a folder

Indymotion.fr est une instance peertube indépendante qui offre des accès illimité et gratuits à des individus et organisations, majoritairement sans but de profit, et en langue française. Lisez nos conditions avant de demander un compte. Merci.

Martin Kirchgessner @martin_kirch@piaille.fr

· 8mo ago

Replying to

@pintoch@mamot.fr it's a hidden diversity issue.

few people can afford to contribute "for free", therefore

Those who contribute for business represent much more humanpower
Others don't have time to discuss about how their community should work
Others don't need to discuss that, because they're so close on social scales. Having time and knowledge and motivation to contribute is amazingly correlated to being a white middle-age man without kids... (I wouldn't call them grassroots)

As long as we live in capitalism, corporations are the mainstream way for people to make a living from contributing, which is the only way to have actually diverse contributors

Martin Kirchgessner @martin_kirch@piaille.fr

· 8mo ago

Replying to

@pintoch@mamot.fr i'm afraid it's a trap: everybody need to wonder about how they're organized, and I wouldn't like to see the usual suspects jumping in those conversations as experts, again. It's complicated. I'm more enclined to shift my bros on goals instead of methods. Like, replacing the usual performance races by accessibility. Then reaching out to already-diverse domains that don't have their own tech already: suddenly you're back to a position where you have to learn a lot, but if done correctly it also yields concrete impacts that are more rewarding.