Just migrated my #offline #gnupg and #ssh key setup to a new #smartcard. This only took about 8 hours whereas when I last did this in 2015, it took much longer. I guess this is a sign of process! But these things are still too painful. At least now, the software just works right out of #Debian.
@eighthave FWIW, I wrote a simple/stateless CLI tool to provision and inspect #OpenPGP card devices:
https://codeberg.org/openpgp-card/openpgp-card-tools
I personally find it much easier to use than #GnuPG to import key material onto cards.
However, as far as I know, no efforts to package the tool for #Debian exist so far.
The tool is, however, packaged for #Arch Linux, #NixOS, and #Void Linux.
With all of that said: Totally agreed! These tasks are way harder than they should be, and I also hope for more progress.
@hko that is great, we need tools like this. That is the easiest way currently to make a simple UX. I still hope that the core tools can be improved to provide a simple UX, that is much harder and takes longer. https://github.com/johndoe31415/hsmwiz is another #smartcard tool like that.
