A live buildroot based Linux distribution designed for managing secrets offline.

Go to file

Lance Vick 05e58b8e77 first pass of kernel hardening		2020-06-16 20:23:08 -07:00
config	first pass of kernel hardening	2020-06-16 20:23:08 -07:00
scripts	more rename fixes	2020-06-15 19:22:36 -07:00
Makefile	rename to airgap	2020-06-15 11:04:50 -07:00
README.md	rename to airgap	2020-06-15 11:04:50 -07:00

README.md

Airgap

https://gitlab.com/pchq/airgap

About

A live buildroot based distribution designed for managing secrets offline.

Built for those of us that want to be -really- sure our most important secrets are managed in a clean environment with an "air gap" between us and the internet.

Use Cases

Generate GPG keychain
Store/Restore gpg keychain to security token such as a Yubikey or Nitrokey
Signing cryptocurrency transactions
Generate/backup BIP39 universal cryptocurrency wallet seed
Store/Restore BIP39 seed to a hardware wallet such as a Trezor or Ledger

Requirements

Software

docker 18+

Hardware

Any x86_64 laptop known to support Linux should work.
Ideally use a coreboot compatible machine with Heads for secure boot
Ensure any Wifi/Bluetooth/Audio devices are removed

Build

make all

Install

TBD

Development

Boot image in qemu

make vm