Add key management tools to live ISO

misc/custom-iso-base.nix

@@ -55,12 +55,30 @@ in
     ../base.nix
   ];
 
-  environment.systemPackages = [
+  environment.systemPackages =
-    pkgs.cryptsetup
+    (with pkgs; [
-    create-partitions
+      cryptsetup
-    create-filesystems
+      onlykey
-    prep-install
+      onlykey-cli
-  ];
+      onlykey-agent
+    ])
+    ++ [
+      create-partitions
+      create-filesystems
+      prep-install
+    ];
+
+  programs.gnupg.agent = {
+    enable = true;
+    enableSSHSupport = true;
+    pinentryPackage = pkgs.pinentry-curses;
+  };
+  services.udev.extraRules = ''
+    ATTRS{idVendor}=="1d50", ATTRS{idProduct}=="60fc", ENV{ID_MM_DEVICE_IGNORE}="1"
+    ATTRS{idVendor}=="1d50", ATTRS{idProduct}=="60fc", ENV{MTP_NO_PROBE}="1"
+    SUBSYSTEMS=="usb", ATTRS{idVendor}=="1d50", ATTRS{idProduct}=="60fc", MODE:="0666"
+    KERNEL=="ttyACM*", ATTRS{idVendor}=="1d50", ATTRS{idProduct}=="60fc", MODE:="0666"
+  '';
 
   isoImage.squashfsCompression = "gzip -Xcompression-level 1";